PT-2026-52748 · Unknown · Buddyboss Platform
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Buddyboss Platform versions prior to 3.0.5
Description
PHP Object Injection occurs when an application deserializes untrusted data, allowing an attacker to manipulate the application logic or execute arbitrary code by injecting malicious objects into the
Subscriber object.Recommendations
Update Buddyboss Platform to version 3.0.5 or later.
Fix
Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Buddyboss Platform