Lucene search
Ubuntu.comUB:CVE-2015-5623HistoryAug 03, 2015 - 12:00 a.m.
CVE-2015-5623
2015-08-0300:00:00
ubuntu.com
ubuntu.com
14
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
47.7%
WordPress before 4.2.3 does not properly verify the edit_posts capability,
which allows remote authenticated users to bypass intended access
restrictions and create drafts by leveraging the Subscriber role, as
demonstrated by a post-quickdraft-save action to wp-admin/post.php.
Related
debiancve
debiancve
CVE-2015-5623
2015-08-03 14:59:00
patchstack
patchstack
WordPress <= 4.2.2 - XSS
2015-07-23 00:00:00
cve
cve
CVE-2015-5623
2015-08-03 14:59:00
CVE-2015-2212
2015-08-03 14:59:00
prion
prion
Design/Logic Flaw
2015-08-03 14:59:00
veracode
veracode
Bypass Access Restrictions
2017-07-28 10:45:49
nessus
nessus
WordPress < 3.7.9 / 3.8.9 / 3.9.7 / 4.1.6 / 4.2.3 Multiple Vulnerabilities
2015-07-29 00:00:00
Debian DSA-3328-1 : wordpress - security update
2015-08-13 00:00:00
wpvulndb
wpvulndb
WordPress <= 4.2.2 - Authenticated Stored Cross-Site Scripting (XSS)
2015-07-23 00:00:00
checkpoint_advisories
checkpoint_advisories
WordPress post Request Privilege Escalation (CVE-2015-2212; CVE-2015-5623)
2015-07-28 00:00:00
freebsd
freebsd
wordpress -- XSS vulnerability
2015-07-23 00:00:00
wpexploit
wpexploit
WordPress <= 4.2.2 - Authenticated Stored Cross-Site Scripting (XSS)
2015-07-23 00:00:00
mageia
mageia
Updated wordpress package fixes security vulnerabilities
2015-07-27 21:54:19
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0290)
2022-01-28 00:00:00
Debian Security Advisory DSA 3328-1 (wordpress - security update)
2015-08-04 00:00:00
Debian: Security Advisory (DSA-3328-1)
2015-08-03 00:00:00
debian
debian
[SECURITY] [DSA 3328-2] wordpress regression update
2015-08-04 15:36:24
[SECURITY] [DSA 3328-1] wordpress security update
2015-08-04 06:51:55
securityvulns
securityvulns
[SECURITY] [DSA 3328-1] wordpress security update
2015-08-24 00:00:00
osv
osv
wordpress - security update
2015-08-04 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: wordpress-4.2.4-1.fc22
2015-08-13 16:57:53
[SECURITY] Fedora 21 Update: wordpress-4.2.4-1.fc21
2015-08-13 16:54:48
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
47.7%
Related for UB:CVE-2015-5623