Lucene search
HistoryJul 08, 2013 - 8:55 p.m.
CVE-2013-2199
wordpress
http api
cve-2013-2199
ssrf
server-side request forgery
security vulnerability
nvd
6.5 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
68.5%
The HTTP API in WordPress before 3.5.2 allows remote attackers to send HTTP requests to intranet servers via unspecified vectors, related to a Server-Side Request Forgery (SSRF) issue, a similar vulnerability to CVE-2013-0235.
Related
debiancve
debiancve
CVE-2013-2199
2013-07-08 20:55:00
CVE-2013-0235
2013-07-08 20:55:00
ubuntucve
ubuntucve
CVE-2013-2199
2013-07-08 00:00:00
CVE-2013-0235
2013-07-08 00:00:00
prion
prion
Server side request forgery (ssrf)
2013-07-08 20:55:00
Server side request forgery (ssrf)
2013-07-08 20:55:00
cvelist
cvelist
CVE-2013-2199
2013-07-08 20:00:00
CVE-2013-0235
2022-10-03 16:15:04
patchstack
patchstack
WordPress <= 3.5.1 - Multiple SSRF
2013-02-19 00:00:00
WordPress <= 3.5.0 - SSRF
2012-12-06 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2718-1)
2013-06-30 00:00:00
Debian Security Advisory DSA 2718-1 (wordpress - several vulnerabilities)
2013-07-01 00:00:00
Mageia: Security Advisory (MGASA-2013-0198)
2022-01-28 00:00:00
osv
osv
wordpress - several
2013-07-01 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2718-1] wordpress security update
2013-07-08 00:00:00
mageia
mageia
Updated wordpress package fixes security vulnerabilities
2013-07-01 23:19:24
nessus
nessus
Debian DSA-2718-1 : wordpress - several vulnerabilities
2013-07-03 00:00:00
Mandriva Linux Security Advisory : wordpress (MDVSA-2013:189)
2013-07-03 00:00:00
WordPress 'xmlrpc.php' pingback.ping Server-Side Request Forgery
2013-02-04 00:00:00
debian
debian
[SECURITY] [DSA 2718-1] wordpress security update
2013-07-02 19:51:57
thn
thn
wpvulndb
wpvulndb
WordPress 1.5.1 - 3.5 XMLRPC Pingback API Internal/External Port Scanning
2014-08-01 10:58:20
cve
cve
CVE-2013-0235
2013-07-08 20:55:00
fedora
fedora
[SECURITY] Fedora 18 Update: wordpress-3.5.2-1.fc18
2013-07-03 01:37:44
[SECURITY] Fedora 19 Update: wordpress-3.5.2-1.fc19
2013-07-03 01:36:05
[SECURITY] Fedora 17 Update: wordpress-3.5.2-1.fc17
2013-07-03 01:38:56
freebsd
freebsd
wordpress -- multiple vulnerabilities
2013-06-21 00:00:00
wordpress -- multiple vulnerabilities
2013-01-24 00:00:00
6.5 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
68.5%
Related for CVE-2013-2199