Authorization Bypass Through User-Controlled Key

Overview buddypress/buddypress is a software for online communities, teams, and groups. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the friends REST API endpoint. An attacker can access another user's complete friend list by specifying ...

Authorization Bypass Through User-Controlled Key

Overview buddypress/buddypress is a software for online communities, teams, and groups. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the getitempermissionscheck process. An attacker can access, read, reply to, or delete private message...