PT-2017-11583 · Tablepress · Tablepress

Yuji Tounai · Publicado 2017-11-17 · Atualizado 2017-12-04 · CVE-2017-10889

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions TablePress versions prior to 1.8.1

Description The issue allows an attacker to conduct XML External Entity (XXE) attacks. XXE attacks occur when an application parses XML input that contains external entities, which can lead to unauthorized access to sensitive data or systems.

Recommendations For versions prior to 1.8.1, update to version 1.8.1 or later to resolve the issue.

Correção

XXE

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

CVE-2017-10889

Produtos afetados

Tablepress

Referências · 5

• https://wordpress.org/plugins/tablepress/#developers · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10889 · Nota
• https://jvn.jp/en/jp/JVN05398317/index.html · Nota
• https://osv.dev/vulnerability/CVE-2017-10889 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-10889 · Nota de Segurança