Description
wp-admin/user-edit.php in WordPress before 2.0.5 allows remote authenticated users to read the metadata of an arbitrary user via a modified user_id parameter.
Remediation
References
Related Vulnerabilities
SharePoint CVE-2023-29357 Vulnerability (CVE-2023-29357)
Drupal 7PK - Security Features Vulnerability (CVE-2016-3163)
Oracle Application Server CVE-2009-1976 Vulnerability (CVE-2009-1976)
Zope Web Application Server Resource Management Errors Vulnerability (CVE-2008-5102)
Contao Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2019-10641)