Published: 02/11/2020 Updated: 07/11/2023

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

WordPress prior to 5.5.2 mishandles deserialization requests in wp-includes/Requests/Utility/FilteredIterator.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wordpress wordpress
fedoraproject fedora 31
fedoraproject fedora 32
fedoraproject fedora 33
debian debian linux 9.0
debian debian linux 10.0

Debian Bug report logs - #973562 wordpress: Wordpress 552 security release Package: wordpress; Maintainer for wordpress is Craig Small <csmall@debianorg>; Source for wordpress is src:wordpress (PTS, buildd, popcon) Reported by: Craig Small <csmall@debianorg> Date: Sun, 1 Nov 2020 21:03:02 UTC Severity: importan ...

Several vulnerabilities were discovered in Wordpress, a web blogging tool They allowed remote attackers to run insecure deserialization, embed spam, perform various Cross-Site Scripting (XSS) or Cross-Site Request Forgery (CSRF) attacks, escalate privileges, run arbitrary code, and delete arbitrary files For the stable distribution (buster), thes ...

WordPress before 552 mishandles deserialization requests in wp-includes/Requests/Utility/FilteredIteratorphp ...

PoC for CVE-2020-28032 (It's just a POP chain in WordPress < 5.5.2 for exploiting PHP Object Injection)

CVE-2020-28032_PoC PoC for CVE-2020-28032 (It's just a POP chain in WordPress < 552 for exploiting PHP Object Injection) Example output nth347@ubuntu:~$ php CVE-2020-28032_PoCphp WC_Log_Handler_File Object ( [handles:protected] => Requests_Utility_FilteredIterator Object ( [callback:protected] => system [storage:

CWE-502 https://wpscan.com/vulnerability/10446 https://wordpress.org/news/2020/10/wordpress-5-5-2-security-and-maintenance-release/https://github.com/WordPress/wordpress-develop/commit/add6bedf3a53b647d0ebda2970057912d3cd79d3 https://lists.debian.org/debian-lts-announce/2020/11/msg00004.html https://www.debian.org/security/2020/dsa-4784 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VAVVYJKA2I6CRQUINECDPBGWMQDEG244/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUXVUAKL2HL4QYJEPHBNVQQWRMFMII2Y/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHVNK2WYAM3ZTCXTFSEIT56IKLVJHU3/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=973562 https://nvd.nist.gov https://github.com/nth347/CVE-2020-28032_PoC https://www.debian.org/security/2020/dsa-4784

CVE-2020-28032

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect