CVE-2018-10101
CVE-2018-10101
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server.
CVSS 6.1 · Medium · EPSS 2.6% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- https://wpvulndb.com/vulnerabilities/9053
- http://www.securityfocus.com/bid/104350
- http://www.securitytracker.com/id/1040836
- https://www.debian.org/security/2018/dsa-4193
- https://wordpress.org/news/2018/04/wordpress-4-9-5-security-and-maintenance-release/
- https://core.trac.wordpress.org/changeset/42894
- https://codex.wordpress.org/Version_4.9.5
- https://github.com/WordPress/WordPress/commit/804363859602d4050d9a38a21f5a65d9aec18216
- https://nvd.nist.gov/vuln/detail/CVE-2018-10101