PT-2017-4047 · WordPress · Wordpress

Publicado 2017-01-29 · Atualizado 2021-01-30 · CVE-2017-5611

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.7.2

Description The issue is related to a SQL injection vulnerability in the WP Query function, specifically in the wp-includes/class-wp-query.php file. This vulnerability can be exploited by remote attackers to execute arbitrary SQL commands, provided that an affected plugin or theme mishandles a crafted post type name. The vulnerability is associated with the lack of protection for the SQL query structure.

Recommendations For versions prior to 4.7.2, update to version 4.7.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted post type names in affected plugins or themes until a patch is applied. Additionally, ensure that all plugins and themes are updated to their latest versions to minimize the risk of exploitation.

Correção

RCE

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

BDU:2021-00683

CVE-2017-5611

DLA-813-1

DSA-3779-1

Produtos afetados

Wordpress

Referências · 33

• https://github.com/WordPress/WordPress/commit/85384297a60900004e27e417eac56d24267054cb · Correção
• https://wordpress.org/news/2017/01/wordpress-4-7-2-security-release · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2017/01/27/2 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5610 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2017-5611 · Nota de Segurança
• https://wpvulndb.com/vulnerabilities/8730 · Correção
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-5611 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5491 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5611 · Nota de Segurança
• http://openwall.com/lists/oss-security/2017/01/28/5 · Correção
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5492 · Nota de Segurança
• https://security-tracker.debian.org/tracker/DSA-3779-1 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/source-package/wordpress · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-5611 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5490 · Nota de Segurança