Lucene search
PRIOn knowledge basePRION:CVE-2016-2222HistoryMay 22, 2016 - 1:59 a.m.
Server side request forgery (ssrf)
2016-05-2201:59:00
PRIOn knowledge base
www.prio-n.com
2
The wp_http_validate_url function in wp-includes/http.php in WordPress before 4.4.2 allows remote attackers to conduct server-side request forgery (SSRF) attacks via a zero value in the first octet of an IPv4 address in the u parameter to wp-admin/press-this.php.
References
www.debian.org/security/2016/dsa-3472
www.securityfocus.com/bid/82454
www.securitytracker.com/id/1034933
codex.wordpress.org/Version_4.4.2
core.trac.wordpress.org/changeset/36435
hackerone.com/reports/110801
news.ycombinator.com/item?id=20433070
wordpress.org/news/2016/02/wordpress-4-4-2-security-and-maintenance-release/
wpvulndb.com/vulnerabilities/8376
Related
veracode
veracode
Server-Side Request Forgery (SSRF)
2017-07-28 00:24:52
cvelist
cvelist
CVE-2016-2222
2016-05-22 01:00:00
wpvulndb
wpvulndb
WordPress 3.7-4.4.1 - Local URIs Server Side Request Forgery (SSRF)
2016-02-02 00:00:00
patchstack
patchstack
WordPress <= 4.4.1 - SSRF
2016-02-05 00:00:00
nvd
nvd
CVE-2016-2222
2016-05-22 01:59:15
cve
cve
CVE-2016-2222
2016-05-22 01:59:15
ubuntucve
ubuntucve
CVE-2016-2222
2016-05-22 00:00:00
debiancve
debiancve
CVE-2016-2222
2016-05-22 01:59:15
nessus
nessus
Debian DSA-3472-1 : wordpress - security update
2016-02-09 00:00:00
Debian DLA-418-1 : wordpress security update
2016-02-17 00:00:00
WordPress < 4.4.2 Multiple Vulnerabilities
2016-02-19 00:00:00
freebsd
freebsd
wordpress -- multiple vulnerabilities
2016-02-02 00:00:00
openvas
openvas
Debian Security Advisory DSA 3472-1 (wordpress - security update)
2016-02-08 00:00:00
Debian: Security Advisory (DSA-3472-1)
2016-02-07 00:00:00
Debian: Security Advisory (DLA-418-1)
2023-03-08 00:00:00
osv
osv
wordpress - security update
2016-02-17 00:00:00
wordpress - security update
2016-02-08 00:00:00
debian
debian
[SECURITY] [DLA 418-1] wordpress security update
2016-02-16 23:03:46
[SECURITY] [DSA 3472-1] wordpress security update
2016-02-08 20:25:09
[SECURITY] [DSA 3472-1] wordpress security update
2016-02-08 20:25:09