CVE-2021-21389
1 advisory.
Packagist/buddypress/buddypress CVE-2021-21389: high 8.1, EPSS 13.52%
BuddyPress privilege escalation via REST API
Action: Upgrade buddypress/buddypress to 7.2.1 or later.
composer require buddypress/buddypress:7.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 7.2.1 | - |
Fixed versions
| 7.2.1 |
Sources
- osv: GHSA-m6j4-8r7p-wpp3
- https://github.com/buddypress/BuddyPress/security/advisories/GHSA-m6j4-8r7p-wpp3
- https://nvd.nist.gov/vuln/detail/CVE-2021-21389
- https://buddypress.org/2021/03/buddypress-7-2-1-security-release
- https://codex.buddypress.org/releases/version-7-2-1
- https://github.com/buddypress/BuddyPress
CVE-2021-21389 · published · modified · JSON