Description

In Serendipity before 2.0.5, an attacker can bypass SSRF protection by using a malformed IP address (e.g., http://127.1) or a 30x (aka Redirection) HTTP status code.

Remediation

References

CVE-2016-9752

Related Vulnerabilities

WordPress Plugin Easy Affiliate Links Cross-Site Scripting (3.7.0)

WordPress Plugin AutomatorWP-The most flexible and powerful no-code automation for WordPress Security Bypass (1.7.5)

WordPress Plugin GS Products Slider for WooCommerce Cross-Site Scripting (1.5.8)

WordPress Plugin WP Page Builder Cross-Site Scripting (1.2.8)

WordPress 4.0.x PHP Object Injection (4.0 - 4.0.32)

Severity

High

Classification

CVE-2016-9752 CWE-918 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities