CVE-2023-32671

概要

参考情報

• incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-budyboss · Third Party Advisory

buddyboss のその他の脆弱性

• CVE-2024-4750中 5.3The buddyboss-platform WordPress plugin before 2.6.0 contains an IDOR vulnerability that allows a user to like a private post by manipulatin…
• CVE-2023-32670中 5.4Cross-Site Scripting vulnerability in BuddyBoss 2.2.9 version , which could allow a local attacker with basic privileges to execute a mal…
• CVE-2023-32669中 5.4Authorization bypass vulnerability in BuddyBoss 2.2.9 version, the exploitation of which could allow an authenticated user to access and ren…
• CVE-2021-44692中 5.3BuddyBoss Platform through 1.8.0 allows remote attackers to obtain the email address of each user. When creating a new user, it generates a …
• CVE-2021-43334中 5.4BuddyBoss Platform through 1.8.0 allows XSS via the Group Name or Group Description field.