Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22564
HistoryFeb 25, 2020 - 4:39 a.m.

Information Disclosure

2020-02-2504:39:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.002 Low

EPSS

Percentile

60.8%

buddypress is vulnerable to information disclosure. Requests to a some of the REST API endpoints can allow an unauthenticated remote attacker to obtain private user data.

CPENameOperatorVersion
buddypress/buddypressle5.1.1

0.002 Low

EPSS

Percentile

60.8%