CVE-2013-4339

Опубликовано: 12 сент. 2013

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

WordPress before 3.6.1 does not properly validate URLs before use in an HTTP redirect, which allows remote attackers to bypass intended redirection restrictions via a crafted string.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*

Версия до 3.6 (включая)

EPSS

Процентиль: 75%

0.00882

Низкий

7.5 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2013-4339

ubuntu

около 12 лет назад

WordPress before 3.6.1 does not properly validate URLs before use in an HTTP redirect, which allows remote attackers to bypass intended redirection restrictions via a crafted string.

CVE-2013-4339

debian

около 12 лет назад

WordPress before 3.6.1 does not properly validate URLs before use in a ...

GHSA-3j2h-mfvw-w96c

github

больше 3 лет назад

WordPress before 3.6.1 does not properly validate URLs before use in an HTTP redirect, which allows remote attackers to bypass intended redirection restrictions via a crafted string.

EPSS

Процентиль: 75%

0.00882

Низкий

7.5 High

CVSS2

Дефекты

CWE-20