NVD

Id
39958  
Name
CVE-2013-4339  
Description
WordPress before 3.6.1 does not properly validate URLs before use in an HTTP redirect, which allows remote attackers to bypass intended redirection restrictions via a crafted string.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-09-12  
Modified Date
2013-12-30  
Seq
2013-4339  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203290 39958 CVE-2013-4339 http://codex.wordpress.org/Version_3.6.1  View
203291 39958 CVE-2013-4339 http://core.trac.wordpress.org/changeset/25323  View
203292 39958 CVE-2013-4339 http://core.trac.wordpress.org/changeset/25324  View
203293 39958 CVE-2013-4339 FEDORA-2013-16855  View
203294 39958 CVE-2013-4339 FEDORA-2013-16925  View
203295 39958 CVE-2013-4339 FEDORA-2013-16895  View
203296 39958 CVE-2013-4339 20131219 URL Redirector Abuse and XSS vulnerabilities in WordPress  View
203297 39958 CVE-2013-4339 http://wordpress.org/news/2013/09/wordpress-3-6-1/  View
203298 39958 CVE-2013-4339 DSA-2757  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22510 JVNDB-2013-004085 WordPress におけるリダイレクション制限を回避される脆弱性 WordPress は、HTTP リダイレクトの前に URL を適切に検証しないため、リダイレクション制限を回避される脆弱性が存在します。 CVE-2013-4339 64281 CVE-2013-4339 39958 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004085.html 2013-09-10 2013-10-31 View