CVE-2023-5692
WordPress Core <= 6.4.3 - Sensitive Information Exposure via redirect_guess_404_permalink
Résumé
WordPress Core <= 6.4.3 - Sensitive Information Exposure via redirect_guess_404_permalink
Description d'origine
La description telle que publiée par la source (souvent en anglais).
WordPress Core is vulnerable to Sensitive Information Exposure in versions up to, and including, 6.4.3 via the redirect_guess_404_permalink function. This can allow unauthenticated attackers to expose the slug of a custom post whose 'publicly_queryable' post status has been set to 'false'.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2023-5692 wordpress
Références
- advisory github.com
- advisory nvd.nist.gov
- web core.trac.wordpress.org
- web developer.wordpress.org
- web developer.wordpress.org
- web github.com
- web wordfence.com