Description

Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components.

Remediation

References

CVE-2017-14719

Related Vulnerabilities

Oracle JRE CVE-2018-2618 Vulnerability (CVE-2018-2618)

MySQL CVE-2013-2391 Vulnerability (CVE-2013-2391)

Apache Tomcat Other Vulnerability (CVE-2002-0936)

Internet Information Services Other Vulnerability (CVE-2000-0886)

XOOPS Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-4851)

Severity

High

Classification

CVE-2017-14719 CWE-22 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities