← Zuruck zu CVEs

CVE-2022-21664

HIGH

7.4

Beschreibung

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to lack of proper sanitization in one of the classes, there's potential for unintended SQL queries to be executed. This has been patched in WordPress version 5.8.3. Older affected versions are also fixed via security release, that go back till 4.1.34. We strongly recommend that you keep auto-updates enabled. There are no known workarounds for this issue.

CVE Details

CVSS v3.1 Bewertung7.4

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienLOW

BenutzerinteraktionNONE

Veroffentlicht1/6/2022

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

debian:debian_linuxfedoraproject:fedorawordpress:wordpress

Schwachen (CWE)

CWE-89CWE-89

Referenzen

https://github.com/WordPress/wordpress-develop/commit/c09ccfbc547d75b392dbccc1ef0b4442ccd3c957(security-advisories@github.com)

https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-jp3p-gw8h-6x86(security-advisories@github.com)

https://lists.debian.org/debian-lts-announce/2022/01/msg00019.html(security-advisories@github.com)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CV4UNEC63UU5GEU47IIR4RMTZAHNEOJG/(security-advisories@github.com)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DM6XPH3JN6V4NF4WBOJTOXZIVE6VKKE3/(security-advisories@github.com)

https://wordpress.org/news/2022/01/wordpress-5-8-3-security-release/(security-advisories@github.com)

https://www.debian.org/security/2022/dsa-5039(security-advisories@github.com)

https://github.com/WordPress/wordpress-develop/commit/c09ccfbc547d75b392dbccc1ef0b4442ccd3c957(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-jp3p-gw8h-6x86(af854a3a-2127-422b-91ae-364da2661108)

https://lists.debian.org/debian-lts-announce/2022/01/msg00019.html(af854a3a-2127-422b-91ae-364da2661108)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CV4UNEC63UU5GEU47IIR4RMTZAHNEOJG/(af854a3a-2127-422b-91ae-364da2661108)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DM6XPH3JN6V4NF4WBOJTOXZIVE6VKKE3/(af854a3a-2127-422b-91ae-364da2661108)

https://wordpress.org/news/2022/01/wordpress-5-8-3-security-release/(af854a3a-2127-422b-91ae-364da2661108)

https://www.debian.org/security/2022/dsa-5039(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.