Lucene search
PRIOn knowledge basePRION:CVE-2019-17669HistoryOct 17, 2019 - 1:15 p.m.
Server side request forgery (ssrf)
2019-10-1713:15:00
PRIOn knowledge base
www.prio-n.com
3
WordPress before 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability because URL validation does not consider the interpretation of a name as a series of hex characters.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 8.0 | |
| debian_linux | eq | 9.0 | |
| debian_linux | eq | 10.0 | |
| wordpress | lt | 5.2.4 |
References
blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html
core.trac.wordpress.org/changeset/46475
github.com/WordPress/WordPress/commit/608d39faed63ea212b6c6cdf9fe2bef92e2120ea
lists.debian.org/debian-lts-announce/2019/11/msg00000.html
seclists.org/bugtraq/2020/Jan/8
wordpress.org/news/2019/10/wordpress-5-2-4-security-release/
wpvulndb.com/vulnerabilities/9912
www.debian.org/security/2020/dsa-4599
www.debian.org/security/2020/dsa-4677
Related
osv
osv
CVE-2019-17669
2019-10-17 13:15:10
wordpress - security update
2019-11-05 00:00:00
wordpress - security update
2020-01-08 00:00:00
cvelist
cvelist
CVE-2019-17669
2019-10-17 12:03:06
nvd
nvd
CVE-2019-17669
2019-10-17 13:15:10
veracode
veracode
Server-Side Request Forgery (SSRF)
2019-10-18 08:40:28
ubuntucve
ubuntucve
CVE-2019-17669
2019-10-17 00:00:00
debiancve
debiancve
CVE-2019-17669
2019-10-17 13:15:10
cve
cve
CVE-2019-17669
2019-10-17 13:15:10
wpvulndb
wpvulndb
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
2019-10-14 00:00:00
nessus
nessus
Debian DLA-1980-1 : wordpress security update
2019-11-06 00:00:00
Debian DSA-4599-1 : wordpress - security update
2020-01-09 00:00:00
Debian DSA-4677-1 : wordpress - security update
2020-05-07 00:00:00
debian
debian
[SECURITY] [DLA 1980-1] wordpress security update
2019-11-05 16:38:37
[SECURITY] [DSA 4599-1] wordpress security update
2020-01-08 05:47:13
[SECURITY] [DSA 4599-1] wordpress security update
2020-01-08 05:47:13
openvas
openvas
Debian: Security Advisory (DLA-1980-1)
2019-11-06 00:00:00
WordPress Multiple Vulnerabilities (Oct 2019) - Windows
2019-10-25 00:00:00
WordPress Multiple Vulnerabilities (Oct 2019) - Linux
2019-10-25 00:00:00
hackerone
hackerone
Nord Security: Version problem in wordpress leads to the many vulnearability
2019-12-05 10:21:54