Lucene search
PRIOn knowledge basePRION:CVE-2019-17675HistoryOct 17, 2019 - 1:15 p.m.
Type confusion
2019-10-1713:15:00
PRIOn knowledge base
www.prio-n.com
7
WordPress before 5.2.4 does not properly consider type confusion during validation of the referer in the admin pages, possibly leading to CSRF.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 8.0 | |
| debian_linux | eq | 9.0 | |
| debian_linux | eq | 10.0 | |
| wordpress | lt | 5.2.4 |
References
blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html
core.trac.wordpress.org/changeset/46477
github.com/WordPress/WordPress/commit/b183fd1cca0b44a92f0264823dd9f22d2fd8b8d0
lists.debian.org/debian-lts-announce/2019/11/msg00000.html
seclists.org/bugtraq/2020/Jan/8
wordpress.org/news/2019/10/wordpress-5-2-4-security-release/
wpvulndb.com/vulnerabilities/9913
www.debian.org/security/2020/dsa-4599
www.debian.org/security/2020/dsa-4677
Related
cvelist
cvelist
CVE-2019-17675
2019-10-17 12:03:29
wpvulndb
wpvulndb
WordPress <= 5.2.3 - Admin Referrer Validation
2019-10-14 00:00:00
debiancve
debiancve
CVE-2019-17675
2019-10-17 13:15:11
nvd
nvd
CVE-2019-17675
2019-10-17 13:15:11
cve
cve
CVE-2019-17675
2019-10-17 13:15:11
veracode
veracode
Cross-Site Request Forgery (CSRF)
2019-10-18 07:13:34
ubuntucve
ubuntucve
CVE-2019-17675
2019-10-17 00:00:00
osv
osv
CVE-2019-17675
2019-10-17 13:15:11
wordpress - security update
2019-11-05 00:00:00
wordpress - security update
2020-01-08 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-1980-1)
2019-11-06 00:00:00
WordPress Multiple Vulnerabilities (Oct 2019) - Windows
2019-10-25 00:00:00
WordPress Multiple Vulnerabilities (Oct 2019) - Linux
2019-10-25 00:00:00
debian
debian
[SECURITY] [DLA 1980-1] wordpress security update
2019-11-05 16:38:37
[SECURITY] [DSA 4599-1] wordpress security update
2020-01-08 05:47:13
[SECURITY] [DSA 4599-1] wordpress security update
2020-01-08 05:47:13
nessus
nessus
Debian DLA-1980-1 : wordpress security update
2019-11-06 00:00:00
Debian DSA-4599-1 : wordpress - security update
2020-01-09 00:00:00
Debian DSA-4677-1 : wordpress - security update
2020-05-07 00:00:00
hackerone
hackerone
Nord Security: Version problem in wordpress leads to the many vulnearability
2019-12-05 10:21:54