Lucene search
INCIBECVE-2023-32669HistoryOct 03, 2023 - 1:15 p.m.
CVE-2023-32669
2023-10-0313:15:10
CWE-639
INCIBE
web.nvd.nist.gov
24
cve-2023-32669
authorization bypass
buddyboss 2.2.9
vulnerability
album access
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
AI Score
5.4
Confidence
High
EPSS
0.001
Percentile
18.6%
Authorization bypass vulnerability in BuddyBoss 2.2.9 version, the exploitation of which could allow an authenticated user to access and rename other users’ albums. This vulnerability can be exploited by changing the album identification (id).
Affected configurations
Node
buddybossbuddybossMatch2.2.9wordpress
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "BuddyBoss",
"vendor": "BuddyBoss",
"versions": [
{
"status": "affected",
"version": "2.2.9"
}
]
}
]Related
vulnrichment
vulnrichment
CVE-2023-32669 Authorization Bypass on BuddyBoss
2023-10-03 12:23:24
prion
prion
Authorization
2023-10-03 13:15:00
nvd
nvd
CVE-2023-32669
2023-10-03 13:15:10
cvelist
cvelist
CVE-2023-32669 Authorization Bypass on BuddyBoss
2023-10-03 12:23:24
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
AI Score
5.4
Confidence
High
EPSS
0.001
Percentile
18.6%
Related for CVE-2023-32669