logo

Database

Lack of data validation In wordpress

Description

WordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON GET requests because certain requests lack a Vary: Origin header.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2019-176732. NVD-2019-176733. OSV-DEBIAN-2019-176734. OSV-2019-176735. SECURITY-TRACKER-CVE-2019-17673

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.