CVEvulnerability

CVE-2016-4029

8.6 HIGH Published 2016-08-07 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2016-08-07
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 8.6 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses: CWE-918

Description

WordPress before 4.5 does not consider octal and hexadecimal IP address formats when determining an intranet address, which allows remote attackers to bypass an intended SSRF protection mechanism via a crafted address.

Affected configurations

• wordpress wordpress (< 4.5) • debian debian linux 8.0

Weakness · CWE (1)

CWE-918 Server-Side Request Forgery weakness

Referenced by CWE · observed example (3)

CWE-1286 Improper Validation of Syntactic Correctness of Input weakness
CWE-1389 Incorrect Parsing of Numbers with Different Radices weakness
CWE-918 Server-Side Request Forgery weakness

References

http://codex.wordpress.org/Version_4.5 Release Notes
http://www.debian.org/security/2016/dsa-3681 Mailing List
http://www.securitytracker.com/id/1036594 Broken Link, Third Party Advisory, VDB Entry
https://core.trac.wordpress.org/query?status=closed&milestone=4.5 Patch
https://wpvulndb.com/vulnerabilities/8473 Broken Link
http://codex.wordpress.org/Version_4.5 Release Notes
http://www.debian.org/security/2016/dsa-3681 Mailing List
http://www.securitytracker.com/id/1036594 Broken Link, Third Party Advisory, VDB Entry
https://core.trac.wordpress.org/query?status=closed&milestone=4.5 Patch
https://wpvulndb.com/vulnerabilities/8473 Broken Link