CVE
- Id
- 90848
- CVE No.
- CVE-2016-4029
- Status
- Candidate
- Description
- WordPress before 4.5 does not consider octal and hexadecimal IP address formats when determining an intranet address, which allows remote attackers to bypass an intended SSRF protection mechanism via a crafted address.
- Phase
- Assigned (20160415)
- Votes
- None (candidate not yet proposed)
- Comments