CVE-2019-20041 — Improper Input Validation in Wordpress

CWE-20 — Improper Input Validation7 documents5 sources
Severity
9.8CRITICALNVD
EPSS
1.4%
top 19.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
WordpressDebian WordpressDebian Linux
Timeline
PublishedDec 27
Latest updateMay 24

Description

wp_kses_bad_protocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon named entity, allowing attackers to bypass input sanitization, as demonstrated by the javascript: substring.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages3 packages

▶debiandebian/wordpress< wordpress 5.3.2+dfsg1-1 (bookworm)
▶NVDwordpress/wordpress< 5.3.1
▶Debianwordpress/wordpress< 5.3.2+dfsg1-1+3

Also affects: Debian Linux 10.0, 8.0, 9.0

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-8j68-mq56-8vpm: wp_kses_bad_protocol in wp-includes/kses↗2022-05-24
▶
OSV
CVE-2019-20041: wp_kses_bad_protocol in wp-includes/kses↗2019-12-27
▶

📋Vendor Advisories

1
Debian
CVE-2019-20041: wordpress - wp_kses_bad_protocol in wp-includes/kses.php in WordPress before 5.3.1 mishandle...↗2019
▶

💬Community

3
Bugzilla
CVE-2019-20041 wordpress: HTML5 colon named entity mishandling in wp_kses_bad_protocol in wp-includes/kses.php allows bypass input sanitization [epel-7]↗2020-01-21
▶
Bugzilla
CVE-2019-20041 wordpress: HTML5 colon named entity mishandling in wp_kses_bad_protocol in wp-includes/kses.php allows bypass input sanitization↗2020-01-21
▶
Bugzilla
CVE-2019-20041 wordpress: HTML5 colon named entity mishandling in wp_kses_bad_protocol in wp-includes/kses.php allows bypass input sanitization [epel-6]↗2020-01-21
▶