Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mjj5-7gmf-mfjx

Опубликовано: 14 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden.

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden.

EPSS

Процентиль: 89%
0.03434
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-367
CWE-918

Связанные уязвимости

CVSS3: 5.9
ubuntu
почти 4 года назад

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden.

CVSS3: 5.9
nvd
почти 4 года назад

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden.

CVSS3: 5.9
debian
почти 4 года назад

WordPress is affected by an unauthenticated blind SSRF in the pingback ...

CVSS3: 5.9
fstec
почти 10 лет назад

Уязвимость метода pingback.ping системы управления содержимым сайта WordPress, позволяющая нарушителю осуществить SSRF-атаку

CVSS3: 5.9
redos
13 дней назад

Уязвимость wordpress

EPSS

Процентиль: 89%
0.03434
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-367
CWE-918