Описание
In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| wordpress | fixed | 5.2.4+dfsg1-1 | package | |
| wordpress | fixed | 4.7.5+dfsg-2+deb9u6 | stretch | package |
Примечания
https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html
https://core.trac.wordpress.org/changeset/46474
https://github.com/WordPress/WordPress/commit/f82ed753cf00329a5e41f2cb6dc521085136f308
EPSS
Связанные уязвимости
In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled.
In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled.
In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled.
Уязвимость системы управления содержимым сайта WordPress, связанная с раскрытием информации, позволяющая нарушителю получить доступ к конфиденциальным данным
EPSS