Lucene search

K
cvelistDebianCVELIST:CVE-2016-2222
HistoryMay 22, 2016 - 1:00 a.m.

CVE-2016-2222

2016-05-2201:00:00
debian
www.cve.org
1

8.4 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.0%

The wp_http_validate_url function in wp-includes/http.php in WordPress before 4.4.2 allows remote attackers to conduct server-side request forgery (SSRF) attacks via a zero value in the first octet of an IPv4 address in the u parameter to wp-admin/press-this.php.

8.4 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.0%