Lucene search

K
osvGoogleOSV:CVE-2020-5244
HistoryFeb 24, 2020 - 6:15 p.m.

CVE-2020-5244

2020-02-2418:15:22
Google
osv.dev
5

EPSS

0.002

Percentile

60.7%

In BuddyPress before 5.1.2, requests to a certain REST API endpoint can result in private user data getting exposed. Authentication is not needed. This has been patched in version 5.1.2.

EPSS

0.002

Percentile

60.7%