Lucene search
GoogleOSV:CVE-2018-10101HistoryApr 16, 2018 - 9:58 a.m.
CVE-2018-10101
2018-04-1609:58:09
Google
osv.dev
8
EPSS
0.005
Percentile
76.6%
Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server.
References
www.securityfocus.com/bid/104350
www.securitytracker.com/id/1040836
codex.wordpress.org/Version_4.9.5
core.trac.wordpress.org/changeset/42894
github.com/WordPress/WordPress/commit/804363859602d4050d9a38a21f5a65d9aec18216
wordpress.org/news/2018/04/wordpress-4-9-5-security-and-maintenance-release/
wpvulndb.com/vulnerabilities/9053
www.debian.org/security/2018/dsa-4193
Related
cve
cve
CVE-2018-10101
2018-04-16 09:58:09
nvd
nvd
CVE-2018-10101
2018-04-16 09:58:09
wpvulndb
wpvulndb
WordPress 3.7-4.9.4 - Remove localhost Default
2018-04-03 00:00:00
cvelist
cvelist
CVE-2018-10101
2018-04-14 13:00:00
veracode
veracode
Wrong Hostname Assumption
2018-04-17 07:26:15
ubuntucve
ubuntucve
CVE-2018-10101
2018-04-16 00:00:00
debiancve
debiancve
CVE-2018-10101
2018-04-16 09:58:09
prion
prion
Code injection
2018-04-16 09:58:00
debian
debian
[SECURITY] [DSA 4193-1] wordpress security update
2018-05-05 21:21:51
[SECURITY] [DSA 4193-1] wordpress security update
2018-05-05 21:21:51
openvas
openvas
WordPress Multiple Vulnerabilities (Apr 2018) - Linux
2018-04-17 00:00:00
WordPress Multiple Vulnerabilities (Apr 2018) - Windows
2018-04-17 00:00:00
nessus
nessus
Debian DSA-4193-1 : wordpress - security update
2018-05-07 00:00:00