CVE-2023-22622
WordPress through 6.1.1 depends on unpredictable client visits to cause wp-cron.php execution and the resulting security updates, and the source code...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
WordPress through 6.1.1 depends on unpredictable client visits to cause wp-cron.php execution and the resulting security updates, and the source code describes "the scenario where a site may not receive enough visits to execute scheduled tasks in a timely manner," but neither the installation guide nor the security guide mentions this default behavior, or alerts the user about security risks on installations with very few visits.
影響パッケージ
Bitnami
wordpress-multisite
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.1.2"}]}]
Bitnami
wordpress
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.1.2"}]}]
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Ubuntu UBUNTU-CVE-2023-22622 wordpress
参照URL
- advisory developer.wordpress.org
- advisory github.com
- advisory patchstack.com
- advisory wordpress.org
- advisory wordpress.org
- advisory tenable.com
- web medium.com
- web nvd.nist.gov