Debian/wordpress: medium 6.5
Wordpress is an open source CMS. A user with the ability to upload files (like an Author) can exploit an XML parsing issue in the Media Library leading to XXE attacks. This requires WordPress installa
Action: Upgrade wordpress to 5.7.1+dfsg1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.7.1+dfsg1-1 | - |
Fixed versions
| 5.7.1+dfsg1-1 |
Sources
- osv: DEBIAN-CVE-2021-29447#Debian:14/wordpress
- https://security-tracker.debian.org/tracker/CVE-2021-29447
published · modified · JSON