medium6.1
CVE-2018-10101
Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server.
Impact
Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wordpress | Wordpress | before 4.9.5 |
| Debian | Debian Linux | Versions 8.0, 9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/104350
- http://www.securitytracker.com/id/1040836
- https://codex.wordpress.org/Version_4.9.5
- https://core.trac.wordpress.org/changeset/42894
- https://github.com/WordPress/WordPress/commit/804363859602d4050d9a38a21f5a65d9aec18216
- https://wordpress.org/news/2018/04/wordpress-4-9-5-security-and-maintenance-release/
- https://wpvulndb.com/vulnerabilities/9053
- https://www.debian.org/security/2018/dsa-4193
- http://www.securityfocus.com/bid/104350
- http://www.securitytracker.com/id/1040836
- https://codex.wordpress.org/Version_4.9.5
- https://core.trac.wordpress.org/changeset/42894
- https://github.com/WordPress/WordPress/commit/804363859602d4050d9a38a21f5a65d9aec18216
- https://wordpress.org/news/2018/04/wordpress-4-9-5-security-and-maintenance-release/
- https://wpvulndb.com/vulnerabilities/9053
- https://www.debian.org/security/2018/dsa-4193