CVE-2020-25286

Опубликовано: 13 сент. 2020

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

In wp-includes/comment-template.php in WordPress before 5.4.2, comments from a post or page could sometimes be seen in the latest comments even if the post or page was not public.

Ссылки

https://core.trac.wordpress.org/changeset/47984
Patch
Vendor Advisory
https://wordpress.org/news/2020/06/wordpress-5-4-2-security-and-maintenance-release/
Vendor Advisory
https://core.trac.wordpress.org/changeset/47984
Patch
Vendor Advisory
https://wordpress.org/news/2020/06/wordpress-5-4-2-security-and-maintenance-release/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*

Версия до 5.4.2 (исключая)

EPSS

Процентиль: 78%

0.01186

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2020-25286

CVSS3: 5.3

ubuntu

почти 5 лет назад

In wp-includes/comment-template.php in WordPress before 5.4.2, comments from a post or page could sometimes be seen in the latest comments even if the post or page was not public.

CVE-2020-25286

CVSS3: 5.3

debian

почти 5 лет назад

In wp-includes/comment-template.php in WordPress before 5.4.2, comment ...

GHSA-8ggp-4pf2-5mgh

github

около 3 лет назад

In wp-includes/comment-template.php in WordPress before 5.4.2, comments from a post or page could sometimes be seen in the latest comments even if the post or page was not public.

EPSS

Процентиль: 78%

0.01186

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo