Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rc6p-mq83-6q2w

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

WordPress 4.7.2 mishandles listings of post authors, which allows remote attackers to obtain sensitive information (Path Disclosure) via a /wp-json/oembed/1.0/embed?url= request, related to the "author_name":" substring.

WordPress 4.7.2 mishandles listings of post authors, which allows remote attackers to obtain sensitive information (Path Disclosure) via a /wp-json/oembed/1.0/embed?url= request, related to the "author_name":" substring.

EPSS

Процентиль: 80%
0.01457
Низкий

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 6 лет назад

WordPress 4.7.2 mishandles listings of post authors, which allows remote attackers to obtain sensitive information (Path Disclosure) via a /wp-json/oembed/1.0/embed?url= request, related to the "author_name":" substring.

CVSS3: 5.3
nvd
около 6 лет назад

WordPress 4.7.2 mishandles listings of post authors, which allows remote attackers to obtain sensitive information (Path Disclosure) via a /wp-json/oembed/1.0/embed?url= request, related to the "author_name":" substring.

CVSS3: 5.3
debian
около 6 лет назад

WordPress 4.7.2 mishandles listings of post authors, which allows remo ...

EPSS

Процентиль: 80%
0.01457
Низкий