Fluid Attacks Database

Description

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version
debian 11	wordpress	=5.7.1+dfsg1-2 \|\| =5.7.11+dfsg1-0+deb11u1 \|\| =5.7.14+dfsg1-0+deb11u1 \|\| =5.7.3+dfsg1-0+deb11u1 \|\| =5.7.5+dfsg1-0+deb11u1 \|\| =5.7.8+dfsg1-0+deb11u1 \|\| =5.7.8+dfsg1-0+deb11u2 \|\| =5.8.1+dfsg1-1 \|\| =5.8.1+dfsg1-2 \|\| =5.8.2+dfsg1-1 \|\| =5.8.3+dfsg1-1 \|\| =5.9.2+dfsg1-1 \|\| =5.9.2+dfsg1-2 \|\| =6.0+dfsg1-1 \|\| =6.0.2+dfsg1-1 \|\| =6.0.3+dfsg1-1 \|\| =6.1+dfsg1-1 \|\| =6.1.1+dfsg1-1 \|\| =6.2+dfsg1-1 \|\| =6.2.1+dfsg1-1 \|\| =6.2.2+dfsg1-1 \|\| =6.3+dfsg1-1 \|\| =6.3.1+dfsg1-1 \|\| =6.3.2+dfsg1-1 \|\| =6.4.1+dfsg1-1 \|\| =6.4.1+dfsg1-1.1 \|\| =6.4.2+dfsg1-1 \|\| =6.4.3+dfsg1-1 \|\| =6.5+dfsg1-1 \|\| =6.5.2+dfsg1-1 \|\| =6.5.3+dfsg1-1 \|\| =6.5.5+dfsg1-1 \|\| =6.6.1+dfsg1-1 \|\| =6.7.2+dfsg1-1 \|\| =6.7.2+dfsg1-1.1 \|\| =6.8.1+dfsg1-1 \|\| =6.8.3+dfsg1-1 \|\| =6.9+dfsg1-1 \|\| =6.9.4+dfsg1-1 \|\| =7.0+dfsg1-1 \|\| =7.0.2+dfsg1-1 \|\| =7.0.3+dfsg1-1 \|\| =7.1+dfsg1-1
debian 12	wordpress	=6.1.1+dfsg1-1 \|\| =6.1.6+dfsg1-0+deb12u1 \|\| =6.1.9+dfsg1-0+deb12u1 \|\| =6.2+dfsg1-1 \|\| =6.2.1+dfsg1-1 \|\| =6.2.2+dfsg1-1 \|\| =6.3+dfsg1-1 \|\| =6.3.1+dfsg1-1 \|\| =6.3.2+dfsg1-1 \|\| =6.4.1+dfsg1-1 \|\| =6.4.1+dfsg1-1.1 \|\| =6.4.2+dfsg1-1 \|\| =6.4.3+dfsg1-1 \|\| =6.5+dfsg1-1 \|\| =6.5.2+dfsg1-1 \|\| =6.5.3+dfsg1-1 \|\| =6.5.5+dfsg1-1 \|\| =6.6.1+dfsg1-1 \|\| =6.7.2+dfsg1-1 \|\| =6.7.2+dfsg1-1.1 \|\| =6.8.1+dfsg1-1 \|\| =6.8.3+dfsg1-1 \|\| =6.9+dfsg1-1 \|\| =6.9.4+dfsg1-1 \|\| =7.0+dfsg1-1 \|\| =7.0.2+dfsg1-1 \|\| =7.0.3+dfsg1-1 \|\| =7.1+dfsg1-1
debian 13	wordpress	=6.8.1+dfsg1-1 \|\| =6.8.3+dfsg1-0+deb13u1 \|\| =6.8.3+dfsg1-1 \|\| =6.8.6+dfsg1-0+deb13u1 \|\| =6.8.7+dfsg1-0+deb13u1 \|\| =6.9+dfsg1-1 \|\| =6.9.4+dfsg1-1 \|\| =7.0+dfsg1-1 \|\| =7.0.2+dfsg1-1 \|\| =7.0.3+dfsg1-1 \|\| =7.1+dfsg1-1
debian 14	wordpress	=6.8.1+dfsg1-1 \|\| =6.8.3+dfsg1-1 \|\| =6.9+dfsg1-1 \|\| =6.9.4+dfsg1-1 \|\| =7.0+dfsg1-1 \|\| =7.0.2+dfsg1-1 \|\| =7.0.3+dfsg1-1 \|\| =7.1+dfsg1-1

Aliases

1. CVE-2022-35902. NVD-2022-35903. OSV-DEBIAN-2022-35904. OSV-2022-35905. SECURITY-TRACKER-CVE-2022-3590

References

1. https://vulncheck.com/cve/CVE-2022-35902. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3590.yaml3. https://github.com/hxlxmj/CVE-2022-3590-WordPress-Vulnerability-Scanner

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.