WP <= 6.1.1 - Unauthenticated Blind SSRF via DNS Rebinding (CVE-2022-3590)

Summary

WP <= 6.1.1 - Unauthenticated Blind SSRF via DNS Rebinding

Original description

The description as published by the source.

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami wordpress-multisite

[{"type":"SEMVER","events":[{"introduced":"4.1.0"},{"fixed":"4.1.1"},{"introduced":"4.2.0"},{"fixed":"6.1.2"}]}]

Bitnami wordpress

[{"type":"SEMVER","events":[{"introduced":"4.1.0"},{"fixed":"4.1.1"},{"introduced":"4.2.0"},{"fixed":"6.1.2"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2022-3590 wordpress
Ubuntu UBUNTU-CVE-2022-3590 wordpress

References

advisory nvd.nist.gov
advisory github.com
report wpscan.com
web blog.sonarsource.com