CVE-2014-5203

Опубликовано: 18 авг. 2014

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

wp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before 3.9.2 might allow remote attackers to execute arbitrary code via crafted serialized data.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:wordpress:wordpress:3.9.0:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:3.9.1:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.04351

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2014-5203

ubuntu

почти 11 лет назад

wp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before 3.9.2 might allow remote attackers to execute arbitrary code via crafted serialized data.

CVE-2014-5203

debian

почти 11 лет назад

wp-includes/class-wp-customize-widgets.php in the widget implementatio ...

GHSA-2wgg-mrqh-cxvr

github

около 3 лет назад

wp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before 3.9.2 might allow remote attackers to execute arbitrary code via crafted serialized data.

EPSS

Процентиль: 88%

0.04351

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo