CVE-2020-5244
1 advisory.
Packagist/buddypress/buddypress CVE-2020-5244: high 8, EPSS 2.44%
Private data exposure via REST API in BuddyPress
Action: Upgrade buddypress/buddypress to 5.1.2 or later.
composer require buddypress/buddypress:5.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.1.2 | - |
Fixed versions
| 5.1.2 |
Sources
- osv: GHSA-3j78-7m59-r7gv
- https://github.com/buddypress/BuddyPress/security/advisories/GHSA-3j78-7m59-r7gv
- https://nvd.nist.gov/vuln/detail/CVE-2020-5244
- https://github.com/buddypress/BuddyPress/commit/39294680369a0c992290577a9d740f4a2f2c2ca3
- https://buddypress.org/2020/01/buddypress-5-1-2
CVE-2020-5244 · published · modified · JSON