Description

wp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows remote attackers to cause a denial of service (CPU consumption) via a crafted value of a certain wp-postpass cookie.

Remediation

References

CVE-2013-2173

Related Vulnerabilities

Apache HTTP Server Other Vulnerability (CVE-2000-0868)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4941)

WordPress Plugin Lightbox Jquery Possible Remote Code Execution (0.24)

WordPress Plugin Centrora Security Multiple Vulnerabilities (6.5.6)

Squid Improper Certificate Validation Vulnerability (CVE-2023-46724)

Severity

Medium

Classification

CVE-2013-2173

Tags

Missing Update Known Vulnerabilities