Lucene search
Veracode Vulnerability DatabaseVERACODE:6126HistoryApr 17, 2018 - 7:26 a.m.
Wrong Hostname Assumption
2018-04-1707:26:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
EPSS
0.005
Percentile
76.6%
WordPress is vulnerable to the wrong hostname assumption. The wp_http_validate_url() function wrongly treats the URLs with the hostname= localhost as the same host by default.
Related
cve
cve
CVE-2018-10101
2018-04-16 09:58:09
nvd
nvd
CVE-2018-10101
2018-04-16 09:58:09
wpvulndb
wpvulndb
WordPress 3.7-4.9.4 - Remove localhost Default
2018-04-03 00:00:00
osv
osv
CVE-2018-10101
2018-04-16 09:58:09
cvelist
cvelist
CVE-2018-10101
2018-04-14 13:00:00
ubuntucve
ubuntucve
CVE-2018-10101
2018-04-16 00:00:00
debiancve
debiancve
CVE-2018-10101
2018-04-16 09:58:09
prion
prion
Code injection
2018-04-16 09:58:00
debian
debian
[SECURITY] [DSA 4193-1] wordpress security update
2018-05-05 21:21:51
[SECURITY] [DSA 4193-1] wordpress security update
2018-05-05 21:21:51
openvas
openvas
WordPress Multiple Vulnerabilities (Apr 2018) - Linux
2018-04-17 00:00:00
WordPress Multiple Vulnerabilities (Apr 2018) - Windows
2018-04-17 00:00:00
nessus
nessus
Debian DSA-4193-1 : wordpress - security update
2018-05-07 00:00:00