CVE-2024-4886: Buddyboss Platform

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

The contains an IDOR vulnerability that allows a user to comment on a private post by manipulating the ID included in the request

Affected products

• Buddyboss Buddyboss Platform: before 2.6.00 (fixed in 2.6.00)

Published 2024-06-05. Last modified 2026-06-17.