CVE-2017-5611
CRITICAL severity · CVSS 9.8 · SQL injection
9.8CVSS CRITICAL
Summary
SQL injection vulnerability in wp-includes/class-wp-query.php in WP_Query in WordPress before 4.7.2 allows remote attackers to execute arbitrary SQL commands by leveraging the presence of an affected plugin or theme that mishandles a crafted post type name.
Impact & exploitability
Attack vectorNetwork
Attack complexityLow
Privileges requiredNone
User interactionNone
Confidentiality impactHigh
Integrity impactHigh
Availability impactHigh
Exploit probability (EPSS)12%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Recommendation
Apply the vendor fix promptly. Open any affected product above for its exact safe version.
Official patch: http://www.openwall.com/lists/oss-security/2017/01/28/5 ↗
Additional information
- NVD record
- http://www.openwall.com/lists/oss-security/2017/01/28/5Patch
- https://github.com/WordPress/WordPress/commit/85384297a60900004e27e417eac56d24267054cbPatch
- https://wordpress.org/news/2017/01/wordpress-4-7-2-security-release/Patch
- https://wpvulndb.com/vulnerabilities/8730Patch
- https://codex.wordpress.org/Version_4.7.2Advisory
- http://www.debian.org/security/2017/dsa-3779Advisory
- http://www.securityfocus.com/bid/95816Advisory
- http://www.securitytracker.com/id/1037731Advisory