CVE-2011-3129 — Wordpress vulnerability

CWE-2644 documents4 sources

Severity

9.3CRITICALNVD

EPSS

0.6%

top 30.15%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Wordpress Debian Wordpress

Timeline

PublishedAug 10

Latest updateMay 17

Description

The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerous security settings," has unknown impact and attack vectors, possibly related to dangerous filenames.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶debiandebian/wordpress< wordpress 3.2.1+dfsg-1 (bookworm)

▶Debianwordpress/wordpress< 3.2.1+dfsg-1+3

▶NVDwordpress/wordpress4 versions+3

Patches

Patch: wordpress.org ↗Patch: wordpress.org ↗

🔴Vulnerability Details

GHSA

GHSA-v556-6q84-9x6w: The file upload functionality in WordPress 3↗2022-05-17

▶

OSV

CVE-2011-3129: The file upload functionality in WordPress 3↗2011-08-10

▶

📋Vendor Advisories

Debian

CVE-2011-3129: wordpress - The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta ...↗2011

▶