PT-2019-5222 · WordPress · Wordpress

Nguyen The Duc · Publicado 2019-09-11 · Atualizado 2022-11-23 · CVE-2019-20041

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 5.3.1

Description The issue is related to the wp kses bad protocol function in WordPress, which mishandles the HTML5 colon named entity. This allows attackers to bypass input sanitization. For example, the javascript: substring can be used to demonstrate this issue. The vulnerability can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a denial of service.

Recommendations For WordPress versions prior to 5.3.1, update to version 5.3.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the wp kses bad protocol function in wp-includes/kses.php until a patch is available.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2020-01951

CVE-2019-20041

DLA-2067-1

DSA-4599-1

DSA-4677-1

Produtos afetados

Wordpress

Referências · 18

• https://github.com/WordPress/wordpress-develop/commit/b1975463dd995da19bb40d3fa0786498717e3c53 · Correção
• https://security-tracker.debian.org/tracker/CVE-2019-20041 · Aviso do Fabricante
• https://seclists.org/bugtraq/2020/Jan/8 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-20041 · Aviso do Fabricante
• https://debian.org/security/2020/dsa-4599 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-20041 · Aviso do Fabricante
• https://t.me/cvenotify/38361 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2019-20041 · Aviso do Fabricante
• https://osv.dev/vulnerability/DLA-2067-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-20041 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2019-20041 · Nota de Segurança
• https://osv.dev/vulnerability/DSA-4599-1 · Aviso do Fabricante
• https://lists.debian.org/debian-lts-announce/2020/01/msg00010.html · Nota
• https://wordpress.org/news/2019/12/wordpress-5-3-1-security-and-maintenance-release · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-4677-1 · Aviso do Fabricante