CVE-2023-32669
Authorization Bypass on BuddyBoss
概要
Authorization Bypass on BuddyBoss
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Authorization bypass vulnerability in BuddyBoss 2.2.9 version, the exploitation of which could allow an authenticated user to access and rename other users' albums. This vulnerability can be exploited by changing the album identification (id).
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web incibe.es