Lucene search
Veracode Vulnerability DatabaseVERACODE:20319HistoryMay 24, 2019 - 4:34 p.m.
Information Disclosure
2019-05-2416:34:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.002 Low
EPSS
Percentile
56.7%
Wordpress is vulnerable to information disclosure. The vulnerability exists in the wp_prepare_attachment_for_js function in media.php where a remote attacker can modify the parameter author_name as part of a request to /wp-json/oembed/1.0/embed?url which would lead to path disclosure.
| CPE | Name | Operator | Version |
|---|---|---|---|
| johnpbloch/wordpress | le | 4.7.17 | |
| johnpbloch/wordpress-core | le | 4.7.17 | |
| johnpbloch/wordpress | le | 4.7.17 | |
| johnpbloch/wordpress-core | le | 4.7.17 |
Related
openvas
openvas
WordPress <= 4.7.2 Path Disclosure Vulnerability
2019-06-24 00:00:00
WordPress <= 4.7.2 Path Disclosure Vulnerability
2019-06-24 00:00:00
ubuntucve
ubuntucve
CVE-2017-6514
2019-05-22 00:00:00
osv
osv
CVE-2017-6514
2019-05-22 18:29:00
prion
prion
Path traversal
2019-05-22 18:29:00
cve
cve
CVE-2017-6514
2019-05-22 18:29:00
nvd
nvd
CVE-2017-6514
2019-05-22 18:29:00
debiancve
debiancve
CVE-2017-6514
2019-05-22 18:29:00
cvelist
cvelist
CVE-2017-6514
2019-05-22 17:20:03
nessus
nessus
WordPress < 4.7.3 Multiple Vulnerabilities
2017-03-09 00:00:00