CVE-2011-3129

2011-08-1021:55:02

CWE-264

mitre

web.nvd.nist.gov

wordpress

file upload

cve-2011-3129

security settings

attack vectors

dangerous filenames

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

0.003

Percentile

70.7%

JSON

The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running “on hosts with dangerous security settings,” has unknown impact and attack vectors, possibly related to dangerous filenames.

Affected configurations

Nvd

Node

wordpresswordpressMatch3.1

wordpresswordpressMatch3.1.1

wordpresswordpressMatch3.1.2

wordpresswordpressMatch3.2beta1

VendorProductVersionCPE
wordpresswordpress3.1cpe:2.3:a:wordpress:wordpress:3.1:*:*:*:*:*:*:*
wordpresswordpress3.1.1cpe:2.3:a:wordpress:wordpress:3.1.1:*:*:*:*:*:*:*
wordpresswordpress3.1.2cpe:2.3:a:wordpress:wordpress:3.1.2:*:*:*:*:*:*:*
wordpresswordpress3.2cpe:2.3:a:wordpress:wordpress:3.2:beta1:*:*:*:*:*:*

Vendor	Product	Version	CPE
wordpress	wordpress	3.1	cpe:2.3:a:wordpress:wordpress:3.1:::::::*
wordpress	wordpress	3.1.1	cpe:2.3:a:wordpress:wordpress:3.1.1:::::::*
wordpress	wordpress	3.1.2	cpe:2.3:a:wordpress:wordpress:3.1.2:::::::*
wordpress	wordpress	3.2	cpe:2.3:a:wordpress:wordpress:3.2:beta1::::::