6

CVE-2020-4050

WordPress Core < 5.4.2 - Arbitrary User Meta Update

In affected versions of WordPress, misuse of the `set-screen-option` filter's return value allows arbitrary user meta fields to be saved. It does require an admin to install a plugin that would misuse the filter. Once installed, it can be leveraged by low privileged users. This has been patched in version 5.4.2, along with all the previously affected versions via a minor release (5.3.4, 5.2.7, 5.1.6, 5.0.10, 4.9.15, 4.8.14, 4.7.18, 4.6.19, 4.5.22, 4.4.23, 4.3.24, 4.2.28, 4.1.31, 4.0.31, 3.9.32, 3.8.34, 3.7.34).
Mögliche Gegenmaßnahme
WordPress: Update to one of the following versions, or a newer patched version: 3.7.34, 3.8.34, 3.9.32, 4.0.31, 4.1.31, 4.2.28, 4.3.24, 4.4.23, 4.5.22, 4.6.19, 4.7.18, 4.8.14, 4.9.15, 5.0.10, 5.1.6, 5.2.7, 5.3.4, 5.4.2
Weitere Schwachstelleninformationen
SystemWordPress Core
≫
Produkt WordPress
Version [*, 3.7)
Version 3.7 - 3.7.33
Version 3.8 - 3.8.33
Version 3.9 - 3.9.31
Version 4.0 - 4.0.30
Version 4.1 - 4.1.30
Version 4.2 - 4.2.27
Version 4.3 - 4.3.23
Version 4.4 - 4.4.22
Version 4.5 - 4.5.21
Version 4.6 - 4.6.18
Version 4.7 - 4.7.17
Version 4.8 - 4.8.13
Version 4.9 - 4.9.14
Version 5.0 - 5.0.9
Version 5.1 - 5.1.5
Version 5.2 - 5.2.6
Version 5.3 - 5.3.3
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Wordpress ≫ Wordpress Version >= 3.7 < 3.7.34
Wordpress ≫ Wordpress Version >= 3.8 < 3.8.34
Wordpress ≫ Wordpress Version >= 3.9 < 3.9.32
Wordpress ≫ Wordpress Version >= 4.0 < 4.0.31
Wordpress ≫ Wordpress Version >= 4.1 < 4.1.31
Wordpress ≫ Wordpress Version >= 4.2 < 4.2.28
Wordpress ≫ Wordpress Version >= 4.3 < 4.3.24
Wordpress ≫ Wordpress Version >= 4.4 < 4.4.23
Wordpress ≫ Wordpress Version >= 4.5 < 4.5.22
Wordpress ≫ Wordpress Version >= 4.6 < 4.6.19
Wordpress ≫ Wordpress Version >= 4.7 < 4.7.18
Wordpress ≫ Wordpress Version >= 4.8 < 4.8.14
Wordpress ≫ Wordpress Version >= 4.9 < 4.9.15
Wordpress ≫ Wordpress Version >= 5.0 < 5.0.10
Wordpress ≫ Wordpress Version >= 5.1 < 5.1.6
Wordpress ≫ Wordpress Version >= 5.2 < 5.2.7
Wordpress ≫ Wordpress Version >= 5.3.0 < 5.3.4
Wordpress ≫ Wordpress Version >= 5.4 < 5.4.2
Fedoraproject ≫ Fedora Version31
Fedoraproject ≫ Fedora Version32
Debian ≫ Debian Linux Version8.0
Debian ≫ Debian Linux Version9.0
Debian ≫ Debian Linux Version10.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.42% 0.846
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 3.1 1.6 1.4
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
nvd@nist.gov 6 6.8 6.4
AV:N/AC:M/Au:S/C:P/I:P/A:P
security-advisories@github.com 3.5 1.8 1.4
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N
CWE-288 Authentication Bypass Using an Alternate Path or Channel

The product requires authentication, but the product has an alternate path or channel that does not require authentication.