CVE-2018-20149
MEDIUM
5.4
CVSS 3.0
Description
In WordPress before 4.9.9 and 5.x before 5.0.1, when the Apache HTTP Server is used, authors could upload crafted files that bypass intended MIME type restrictions, leading to XSS, as demonstrated by a .jpg file without JPEG data.
Affected WordPress components
-
WordPress coreBefore 4.9.9; From 5.0 (including) to 5.0.1 (excluding)
A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.
Affected products and versions
- n/a n/a — Versions not specified
- wordpress wordpress — Before 4.9.9
- wordpress wordpress — From 5.0 (including) to 5.0.1 (excluding)
References
- www.securityfocus.com http://www.securityfocus.com/bid/106220 Third Party Advisory, VDB Entry
- codex.wordpress.org https://codex.wordpress.org/Version_4.9.9 Product, Vendor Advisory
- github.com https://github.com/WordPress/WordPress/commit/246a70bdbfac3bd45ff71c7941deef1bb206b19a Patch, Third Party Advisory
- lists.debian.org https://lists.debian.org/debian-lts-announce/2019/02/msg00019.html Mailing List, Third Party Advisory
- wordpress.org https://wordpress.org/news/2018/12/wordpress-5-0-1-security-release/ Release Notes, Vendor Advisory
- wordpress.org https://wordpress.org/support/wordpress-version/version-5-0-1/ Release Notes, Vendor Advisory
- wpvulndb.com https://wpvulndb.com/vulnerabilities/9175 Vendor Advisory
- www.debian.org https://www.debian.org/security/2019/dsa-4401 Third Party Advisory
- www.zdnet.com https://www.zdnet.com/article/wordpress-plugs-bug-that-led-to-google-indexing-some-user-passwords/ Press/Media Coverage, Third Party Advisory
- nvd.nist.gov Official NVD record