CVE-2017-6954: BuddyPress Docs plugin Improper Privilege Management
Summary
CVE-2017-6954: BuddyPress Docs plugin Improper Privilege Management. Affects buddypress/buddypress versions < 1.9.3. Fixed in 1.9.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The BuddyPress Docs plugin is a component of the BuddyPress package for WordPress. It provides functionality for creating and managing documents within a BuddyPress community. Users can collaborate on documents, share them with others, and make edits as needed. However, a vulnerability has been discovered in the plugin that allows authenticated users to edit documents of other users without proper permissions.
Vulnerability Detail
The vulnerability originates from a flaw in the 'includes/component.php' file of the BuddyPress Docs plugin. Due to improper privilege management, authenticated users can bypass the intended access controls and modify documents belonging to other users. This can lead to unauthorized changes, potential data loss, and a breach of privacy. The vulnerability has a CVSS score of 4.3, indicating a moderate severity level.
How To Fix
Minimum fixed version
1.9.3
This is the first release that contains the fix.
composer require buddypress/buddypress:1.9.3Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The BuddyPress Docs plugin prior to version 1.9.3 is vulnerable to an improper privilege management issue that allows authenticated users to edit documents of other users without proper permissions. To mitigate this vulnerability, it is crucial to update the plugin to the latest version. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for buddypress/buddypress →
FAQ
Any WordPress website that has the BuddyPress Docs plugin installed and is running a version prior to 1.9.3 is vulnerable to this issue.
An attacker with an authenticated user account can exploit this vulnerability to edit documents belonging to other users without proper permissions. This can lead to unauthorized modifications, potential data loss, and a breach of privacy.
No, there is no known workaround for this vulnerability. It is recommended to update the plugin to the latest version as soon as possible.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your website is affected by this vulnerability. Simply enter your website's URL and the playground will analyze your dependencies to identify any vulnerable packages.
For more information about this vulnerability and its impact, you can refer to the GitHub Security Advisory GHSA-9wf6-88x4-6xvj (https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-9wf6-88x4-6xvj/GHSA-9wf6-88x4-6xvj.json).
Related vulnerabilities
Recent vulnerabilities recorded for buddypress/buddypress.
