CVE-2023-32669

Publication date

2023-10-03 12:23:24

Family

INCIBE

State

PUBLISHED

Description

Authorization bypass vulnerability in BuddyBoss 2.2.9 version, the exploitation of which could allow an authenticated user to access and rename other users albums. This vulnerability can be exploited by changing the album identification (id).