CVE-2013-4339
Publication date 12 September 2013
Last updated 24 July 2024
Ubuntu priority
WordPress before 3.6.1 does not properly validate URLs before use in an HTTP redirect, which allows remote attackers to bypass intended redirection restrictions via a crafted string.
Status
Package | Ubuntu Release | Status |
---|---|---|
wordpress | ||
16.04 LTS xenial |
Not affected
|
|
14.04 LTS trusty | Not in release | |
References
Other references
- http://core.trac.wordpress.org/changeset/25323 and http://core.trac.wordpress.org/changeset/25324
- http://wordpress.org/news/2013/09/wordpress-3-6-1/
- http://core.trac.wordpress.org/changeset/25324
- http://core.trac.wordpress.org/changeset/25323
- http://codex.wordpress.org/Version_3.6.1
- https://www.cve.org/CVERecord?id=CVE-2013-4339