Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
BuddyBoss Platform through 1.8.0 allows remote attackers to obtain the email address of each user. When creating a new user, it generates a Unique ID for their profile. This UID is their private email address with symbols removed and periods replaced with hyphens. For example. JohnDoe@example.com would become /members/johndoeexample-com and Jo.test@example.com would become /members/jo-testexample-com. The members list is available to everyone and (in a default configuration) often without authentication. It is therefore trivial to collect a list of email addresses.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
BuddyBoss Platform 信息泄露漏洞
Vulnerability Description
BuddyBoss Platform是BuddyBoss公司的一个在 WordPress 上运行在线社区的最先进的插件。 BuddyBoss Platform 存在安全漏洞，远程攻击者可利用该漏洞获取每个用户的电子邮件地址。
CVSS Information
N/A
Vulnerability Type
N/A