CVE-2014-5205 in WordPress
Resumen (Inglés)
wp-includes/pluggable.php in WordPress before 3.9.2 does not use delimiters during concatenation of action values and uid values in CSRF tokens, which makes it easier for remote attackers to bypass a CSRF protection mechanism via a brute-force attack.
Reservar
2014-08-13
Divulgación
2014-08-18
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 67378 | WordPress pluggable.php falsificación de solicitudes en sitios cruzados | 352 | No probado | Arreglo oficial | CVE-2014-5205 |