Lucene search
Veracode Vulnerability DatabaseVERACODE:4767HistoryJul 28, 2017 - 12:24 a.m.
Server-Side Request Forgery (SSRF)
2017-07-2800:24:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.013 Low
EPSS
Percentile
86.0%
WordPress is vulnerable to server-side request forgery (SSRF) attacks. The attacks exist because it bypasses the validation of GET request by using URL http://xxx.xxx.xxx.xxx/wp-admin/press-this.php?u=URL_TO_SCRAPE&url-scan-submit;=Scan which has a zero value in the first octet of an IPv4 address in the URI parameter to wp-admin/press-this.php.
Related
cvelist
cvelist
CVE-2016-2222
2016-05-22 01:00:00
wpvulndb
wpvulndb
WordPress 3.7-4.4.1 - Local URIs Server Side Request Forgery (SSRF)
2016-02-02 00:00:00
patchstack
patchstack
WordPress <= 4.4.1 - SSRF
2016-02-05 00:00:00
prion
prion
Server side request forgery (ssrf)
2016-05-22 01:59:00
nvd
nvd
CVE-2016-2222
2016-05-22 01:59:15
cve
cve
CVE-2016-2222
2016-05-22 01:59:15
ubuntucve
ubuntucve
CVE-2016-2222
2016-05-22 00:00:00
debiancve
debiancve
CVE-2016-2222
2016-05-22 01:59:15
nessus
nessus
Debian DSA-3472-1 : wordpress - security update
2016-02-09 00:00:00
Debian DLA-418-1 : wordpress security update
2016-02-17 00:00:00
WordPress < 4.4.2 Multiple Vulnerabilities
2016-02-19 00:00:00
freebsd
freebsd
wordpress -- multiple vulnerabilities
2016-02-02 00:00:00
openvas
openvas
Debian Security Advisory DSA 3472-1 (wordpress - security update)
2016-02-08 00:00:00
Debian: Security Advisory (DSA-3472-1)
2016-02-07 00:00:00
Debian: Security Advisory (DLA-418-1)
2023-03-08 00:00:00
osv
osv
wordpress - security update
2016-02-17 00:00:00
wordpress - security update
2016-02-08 00:00:00
debian
debian
[SECURITY] [DLA 418-1] wordpress security update
2016-02-16 23:03:46
[SECURITY] [DSA 3472-1] wordpress security update
2016-02-08 20:25:09
[SECURITY] [DSA 3472-1] wordpress security update
2016-02-08 20:25:09