Beveiligingsadvies

CVE-2020-5244

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-02-24 17:25:15
Laatst bijgewerkt 2024-08-04 08:22:09
Toegewezen door GitHub_M
CVSS-score 8.0
Status PUBLISHED

Beschrijving

In BuddyPress before 5.1.2, requests to a certain REST API endpoint can result in private user data getting exposed. Authentication is not needed. This has been patched in version 5.1.2.