Описание
In WordPress before 4.7.3 (wp-includes/pluggable.php), control characters can trick redirect URL validation.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| wordpress | fixed | 4.7.3+dfsg-1 | package |
Примечания
https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/
https://github.com/WordPress/WordPress/commit/288cd469396cfe7055972b457eb589cea51ce40e
Связанные уязвимости
CVSS3: 6.1
ubuntu
больше 8 лет назад
In WordPress before 4.7.3 (wp-includes/pluggable.php), control characters can trick redirect URL validation.
CVSS3: 6.1
nvd
больше 8 лет назад
In WordPress before 4.7.3 (wp-includes/pluggable.php), control characters can trick redirect URL validation.
CVSS3: 6.1
github
около 3 лет назад
In WordPress before 4.7.3 (wp-includes/pluggable.php), control characters can trick redirect URL validation.