PT-2019-5222 · WordPress · Wordpress

Nguyen The Duc · Published 2019-09-11 · Updated 2022-11-23 · CVE-2019-20041

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 5.3.1

Description The issue is related to the wp kses bad protocol function in WordPress, which mishandles the HTML5 colon named entity. This allows attackers to bypass input sanitization. For example, the javascript: substring can be used to demonstrate this issue. The vulnerability can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a denial of service.

Recommendations For WordPress versions prior to 5.3.1, update to version 5.3.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the wp kses bad protocol function in wp-includes/kses.php until a patch is available.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2020-01951

CVE-2019-20041

DLA-2067-1

DSA-4599-1

DSA-4677-1

Affected Products

Wordpress

References · 18

• https://github.com/WordPress/wordpress-develop/commit/b1975463dd995da19bb40d3fa0786498717e3c53 · Patch
• https://security-tracker.debian.org/tracker/CVE-2019-20041 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-20041 · Vendor Advisory
• https://debian.org/security/2020/dsa-4599 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-20041 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-20041 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2067-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20041 · Security Note
• https://cve.org/CVERecord?id=CVE-2019-20041 · Security Note
• https://osv.dev/vulnerability/DSA-4599-1 · Vendor Advisory
• https://wordpress.org/news/2019/12/wordpress-5-3-1-security-and-maintenance-release · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4677-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-20041 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-01951 · Security Note
• https://debian.org/security/2020/dsa-4677 · Vendor Advisory