Lucene search

B9BB64E1-025F-524A-89EC-114691539683

HistoryNov 17, 2022 - 3:38 p.m.

Exploit for Improper Restriction of XML External Entity Reference in Wordpress

2022-11-1715:38:22

236

xxe vulnerability

wordpress

wave file

media library

xml parsing

cve-2021-29447

vulnerable code

exploitation

libxml_disable_entity_loader()

fix code

getid3 library

php 8

http server

database credentials

administrator login

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

EPSS

0.027

Percentile

90.7%

JSON

WordPress XXE Vulnerability : CVE-2021-29447

A user with the …

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

EPSS

0.027

Percentile

90.7%

JSON

Related for B9BB64E1-025F-524A-89EC-114691539683