2 matches found
DEBIAN-CVE-2016-4029
WordPress before 4.5 does not consider octal and hexadecimal IP address formats when determining an intranet address, which allows remote attackers to bypass an intended SSRF protection mechanism via a crafted address...
8.6CVSS8AI score0.03965EPSS
SaveExploits0References1
CVE-2016-4029
WordPress before 4.5 does not consider octal and hexadecimal IP address formats when determining an intranet address, which allows remote attackers to bypass an intended SSRF protection mechanism via a crafted address...
9.2CVSS0.03965EPSS
SaveExploits0References7
20