Home

CVE-2019-17675

Description

WordPress before 5.2.4 does not properly consider type confusion during validation of the referer in the admin pages, possibly leading to CSRF.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.923

Associated Vulnerability

VulnerabilityOS Platform
wordpress security update(DSA-4599-1) wordpress_5.0.4+dfsg1-1+deb10u1_all.debLinux
wordpress security update(DSA-4677-1) wordpress_4.7.5+dfsg-2+deb9u6_all.debLinux
wordpress security update(DSA-4677-1) wordpress_5.0.4+dfsg1-1+deb10u2_all.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234