CVE

Id
64286  
CVE No.
CVE-2013-4339  
Status
Candidate  
Description
WordPress before 3.6.1 does not properly validate URLs before use in an HTTP redirect, which allows remote attackers to bypass intended redirection restrictions via a crafted string.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
634095 64286 CVE-2013-4339 FULLDISC:20131219 URL Redirector Abuse and XSS vulnerabilities in WordPress  View
634096 64286 CVE-2013-4339 URL:http://seclists.org/fulldisclosure/2013/Dec/174  View
634097 64286 CVE-2013-4339 CONFIRM:http://codex.wordpress.org/Version_3.6.1  View
634098 64286 CVE-2013-4339 CONFIRM:http://core.trac.wordpress.org/changeset/25323  View
634099 64286 CVE-2013-4339 CONFIRM:http://core.trac.wordpress.org/changeset/25324  View
634100 64286 CVE-2013-4339 CONFIRM:http://wordpress.org/news/2013/09/wordpress-3-6-1/  View
634101 64286 CVE-2013-4339 DEBIAN:DSA-2757  View
634102 64286 CVE-2013-4339 URL:http://www.debian.org/security/2013/dsa-2757  View
634103 64286 CVE-2013-4339 FEDORA:FEDORA-2013-16855  View
634104 64286 CVE-2013-4339 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116828.html  View
634105 64286 CVE-2013-4339 FEDORA:FEDORA-2013-16895  View
634106 64286 CVE-2013-4339 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117118.html  View
634107 64286 CVE-2013-4339 FEDORA:FEDORA-2013-16925  View
634108 64286 CVE-2013-4339 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116832.html  View
634109 64286 CVE-2013-4339 OSVDB:101181  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22958 JVNDB-2013-004533 Xen で使用される QEMU の SCSI の実装におけるバッファオーバーフローの脆弱性 Xen で使用される QEMU の SCSI の実装には、SCSI コントローラに256以上のデバイス接続がある場合、バッファオーバーフローの脆弱性が存在します。 CVE-2013-4344 64286 6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004533.html  View