Lucene search
GoogleOSV:GHSA-3J78-7M59-R7GVHistoryFeb 24, 2020 - 5:18 p.m.
Private data exposure via REST API in BuddyPress
2020-02-2417:18:26
Google
osv.dev
9
EPSS
0.002
Percentile
60.7%
In BuddyPress before 5.1.2, requests to a certain REST API endpoint can result in private user data getting exposed. Authentication is not needed.
This has been patched in version 5.1.2.
Related
github
github
Private data exposure via REST API in BuddyPress
2020-02-24 17:18:26
veracode
veracode
Information Disclosure
2020-02-25 04:39:12
prion
prion
Authentication flaw
2020-02-24 18:15:00
osv
osv
CVE-2020-5244
2020-02-24 18:15:22
openvas
openvas
WordPress BuddyPress Plugin < 5.1.2 Information Disclosure Vulnerability
2020-02-28 00:00:00
nvd
nvd
CVE-2020-5244
2020-02-24 18:15:22
cve
cve
CVE-2020-5244
2020-02-24 18:15:22
cvelist
cvelist
CVE-2020-5244 Private data exposure via REST API in BuddyPress
2020-02-24 17:25:15