Lucene search
Veracode Vulnerability DatabaseVERACODE:21739HistoryOct 18, 2019 - 7:13 a.m.
Cross-Site Request Forgery (CSRF)
2019-10-1807:13:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.002 Low
EPSS
Percentile
58.5%
wordpress is vulnerable to cross-site request forgery (CSRF). An improper validation of the referer in the admin pages can potentially result in a type confusion which can lead to a successful CSRF attack.
References
blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html
core.trac.wordpress.org/changeset/46477
github.com/WordPress/WordPress/commit/b183fd1cca0b44a92f0264823dd9f22d2fd8b8d0
lists.debian.org/debian-lts-announce/2019/11/msg00000.html
seclists.org/bugtraq/2020/Jan/8
wordpress.org/news/2019/10/wordpress-5-2-4-security-release/
wpvulndb.com/vulnerabilities/9913
www.debian.org/security/2020/dsa-4599
www.debian.org/security/2020/dsa-4677
Related
cvelist
cvelist
CVE-2019-17675
2019-10-17 12:03:29
wpvulndb
wpvulndb
WordPress <= 5.2.3 - Admin Referrer Validation
2019-10-14 00:00:00
debiancve
debiancve
CVE-2019-17675
2019-10-17 13:15:11
prion
prion
Type confusion
2019-10-17 13:15:00
nvd
nvd
CVE-2019-17675
2019-10-17 13:15:11
cve
cve
CVE-2019-17675
2019-10-17 13:15:11
ubuntucve
ubuntucve
CVE-2019-17675
2019-10-17 00:00:00
osv
osv
CVE-2019-17675
2019-10-17 13:15:11
wordpress - security update
2019-11-05 00:00:00
wordpress - security update
2020-01-08 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-1980-1)
2019-11-06 00:00:00
WordPress Multiple Vulnerabilities (Oct 2019) - Windows
2019-10-25 00:00:00
WordPress Multiple Vulnerabilities (Oct 2019) - Linux
2019-10-25 00:00:00
debian
debian
[SECURITY] [DLA 1980-1] wordpress security update
2019-11-05 16:38:37
[SECURITY] [DSA 4599-1] wordpress security update
2020-01-08 05:47:13
[SECURITY] [DSA 4599-1] wordpress security update
2020-01-08 05:47:13
nessus
nessus
Debian DLA-1980-1 : wordpress security update
2019-11-06 00:00:00
Debian DSA-4599-1 : wordpress - security update
2020-01-09 00:00:00
Debian DSA-4677-1 : wordpress - security update
2020-05-07 00:00:00
hackerone
hackerone
Nord Security: Version problem in wordpress leads to the many vulnearability
2019-12-05 10:21:54