4.3

CVE-2015-5715

EPSS 28.52%
Veröffentlicht 22.05.2016 01:59:02
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

The mw_editPost function in wp-includes/class-wp-xmlrpc-server.php in the XMLRPC subsystem in WordPress before 4.3.1 allows remote authenticated users to bypass intended access restrictions, and arrange for a private post to be published and sticky, via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 12

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Wordpress ≫ Wordpress Version <= 4.3.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	28.52%	0.964

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	2.8	1.4	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
nvd@nist.gov	4	8	2.9	AV:N/AC:L/Au:S/C:N/I:P/A:N

http://www.debian.org/security/2015/dsa-3383

http://www.debian.org/security/2015/dsa-3375

http://www.securitytracker.com/id/1033979

https://codex.wordpress.org/Version_4.3.1

Patch

Vendor Advisory

https://wordpress.org/news/2015/09/wordpress-4-3-1/

Patch

Vendor Advisory

http://www.securityfocus.com/bid/76748

https://github.com/WordPress/WordPress/commit/9c57f3a4291f2311ae05f22c10eedeb0f69337ab

Patch

https://security-tracker.debian.org/tracker/CVE-2015-5715

https://wpvulndb.com/vulnerabilities/8188

https://nvd.nist.gov/vuln/detail/CVE-2015-5715

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-5715

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-5715

EUVD