CVE-2023-38000
Auth. Stored Cross-Site Scripting (XSS) vulnerability in WordPress core and Gutenberg plugin via Navigation Links Block
概要
Auth. Stored Cross-Site Scripting (XSS) vulnerability in WordPress core and Gutenberg plugin via Navigation Links Block
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Auth. Stored (contributor+) Cross-Site Scripting (XSS) vulnerability in WordPress core 6.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.1.3, from 6.0 through 6.0.5, from 5.9 through 5.9.7 and Gutenberg plugin <= 16.8.0 versions.
影響パッケージ
Bitnami
wordpress-multisite
[{"type":"SEMVER","events":[{"introduced":"5.9.0"},{"fixed":"5.9.8"},{"introduced":"6.0.0"},{"fixed":"6.0.6"},{"introduced":"6.1.0"},{"fixed":"6.1.4"},{"introduced":"6.2.0"},{"fixed":"6.2.3"},{"introduced":"6.3.0"},{"fixed":"6.3.2"}]}]
Bitnami
wordpress
[{"type":"SEMVER","events":[{"introduced":"5.9.0"},{"fixed":"5.9.8"},{"introduced":"6.0.0"},{"fixed":"6.0.6"},{"introduced":"6.1.0"},{"fixed":"6.1.4"},{"introduced":"6.2.0"},{"fixed":"6.2.3"},{"introduced":"6.3.0"},{"fixed":"6.3.2"}]}]
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2023-38000 wordpress 修正版: 6.1.6+dfsg1-0+deb12u1
- Ubuntu UBUNTU-CVE-2023-38000 wordpress
参照URL
- advisory patchstack.com
- advisory patchstack.com
- advisory patchstack.com
- web nvd.nist.gov