CVE-2016-4029 in WordPress
Summary
WordPress before 4.5 does not consider octal and hexadecimal IP address formats when determining an intranet address, which allows remote attackers to bypass an intended SSRF protection mechanism via a crafted address.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
04/15/2016
Disclosure
08/07/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 90607 | WordPress Intranet Address improper authorization | 285 | Not defined | Official fix | CVE-2016-4029 |