onyx --cves cve-2019-17675
CVE-2019-17675
- score
- <0.1
- cvss
- 8.8
- epss
- 2.8%
- published
- 2019-10-17
- kev added
- —
- first seen
WordPress before 5.2.4 contains a cross-site request forgery caused by improper referer validation during admin page requests, letting attackers perform unauthorized actions, exploit requires user interaction with malicious site.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 9
- https://www.debian.org/security/2020/dsa-4599
- https://www.debian.org/security/2020/dsa-4677
- https://core.trac.wordpress.org/changeset/46477
- https://wordpress.org/news/2019/10/wordpress-5-2-4-security-release/
- https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html
- https://github.com/WordPress/WordPress/commit/b183fd1cca0b44a92f0264823dd9f22d2fd8b8d0
- https://lists.debian.org/debian-lts-announce/2019/11/msg00000.html
- https://seclists.org/bugtraq/2020/Jan/8
- https://wpvulndb.com/vulnerabilities/9913