CVEvulnerability
CVE-2018-20149
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-12-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.4 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
In WordPress before 4.9.9 and 5.x before 5.0.1, when the Apache HTTP Server is used, authors could upload crafted files that bypass intended MIME type restrictions, leading to XSS, as demonstrated by a .jpg file without JPEG data.
Affected configurations
• wordpress wordpress (< 4.9.9)
• wordpress wordpress (>= 5.0 < 5.0.1)
• debian debian linux 8.0
• debian debian linux 9.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.securityfocus.com/bid/106220 Third Party Advisory, VDB Entry
- https://codex.wordpress.org/Version_4.9.9 Product, Vendor Advisory
- https://github.com/WordPress/WordPress/commit/246a70bdbfac3bd45ff71c7941deef1bb206b19a Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/02/msg00019.html Mailing List, Third Party Advisory
- https://wordpress.org/news/2018/12/wordpress-5-0-1-security-release/ Release Notes, Vendor Advisory
- https://wordpress.org/support/wordpress-version/version-5-0-1/ Release Notes, Vendor Advisory
- https://wpvulndb.com/vulnerabilities/9175 Vendor Advisory
- https://www.debian.org/security/2019/dsa-4401 Third Party Advisory
- https://www.zdnet.com/article/wordpress-plugs-bug-that-led-to-google-indexing-some-user-passwords/ Press/Media Coverage, Third Party Advisory
- http://www.securityfocus.com/bid/106220 Third Party Advisory, VDB Entry
- https://codex.wordpress.org/Version_4.9.9 Product, Vendor Advisory
- https://github.com/WordPress/WordPress/commit/246a70bdbfac3bd45ff71c7941deef1bb206b19a Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/02/msg00019.html Mailing List, Third Party Advisory
- https://wordpress.org/news/2018/12/wordpress-5-0-1-security-release/ Release Notes, Vendor Advisory
- https://wordpress.org/support/wordpress-version/version-5-0-1/ Release Notes, Vendor Advisory
- https://wpvulndb.com/vulnerabilities/9175 Vendor Advisory
- https://www.debian.org/security/2019/dsa-4401 Third Party Advisory
- https://www.zdnet.com/article/wordpress-plugs-bug-that-led-to-google-indexing-some-user-passwords/ Press/Media Coverage, Third Party Advisory