Lucene search

K
osvGoogleOSV:CVE-2017-6514
HistoryMay 22, 2019 - 6:29 p.m.

CVE-2017-6514

2019-05-2218:29:00
Google
osv.dev
5

6.3 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.7%

WordPress 4.7.2 mishandles listings of post authors, which allows remote attackers to obtain sensitive information (Path Disclosure) via a /wp-json/oembed/1.0/embed?url= request, related to the “author_name”:" substring.

6.3 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.7%