BIT-wordpress-2020-4048: Medium severity WordPress WordPress vulnerability

Q: What does an attacker need to exploit this issue?

An attacker needs the ability to craft an external link that triggers the affected redirect handling, and a user must click that link. The CVSS vector indicates low attack complexity, network reachability, low privileges required, and user interaction.

Q: Which WordPress releases contain the fix?

The issue is patched in WordPress 5.4.2. Fixes were also released for the previously affected branches in versions 5.3.4, 5.2.7, 5.1.6, 5.0.10, 4.9.15, 4.8.14, 4.7.18, 4.6.19, 4.5.22, 4.4.23, 4.3.24, 4.2.28, 4.1.31, 4.0.31, 3.9.32, 3.8.34, and 3.7.34.

Q: How can I determine whether my site is affected?

Check the installed WordPress version. Sites running the listed fixed version for their release branch, or a later version, have the patch; sites below those releases should be treated as affected.

Published Jun 12, 2020

Updated

In affected versions of WordPress, due to an issue in wpvalidateredirect() and URL sanitization, an arbitrary external link can be crafted leading to unintended/open redirect when clicked. This has been patched in version 5.4.2, along with all the previously affected versions via a minor release (5.3.4, 5.2.7, 5.1.6, 5.0.10, 4.9.15, 4.8.14, 4.7.18, 4.6.19, 4.5.22, 4.4.23, 4.3.24, 4.2.28, 4.1.31, 4.0.31, 3.9.32, 3.8.34, 3.7.34).

Affected Software

1 affected component

WordPress WordPress<5.4.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress to a version that resolves this vulnerability.
Fixed in 5.4.2

Event History

Jun 12, 2020

CVE Published

via OSV·04:15 PM

Data Sourced

via OSV·04:15 PM

DescriptionSeverity

Frequently Asked Questions

What does an attacker need to exploit this issue?

An attacker needs the ability to craft an external link that triggers the affected redirect handling, and a user must click that link. The CVSS vector indicates low attack complexity, network reachability, low privileges required, and user interaction.

Which WordPress releases contain the fix?

The issue is patched in WordPress 5.4.2. Fixes were also released for the previously affected branches in versions 5.3.4, 5.2.7, 5.1.6, 5.0.10, 4.9.15, 4.8.14, 4.7.18, 4.6.19, 4.5.22, 4.4.23, 4.3.24, 4.2.28, 4.1.31, 4.0.31, 3.9.32, 3.8.34, and 3.7.34.

How can I determine whether my site is affected?

Check the installed WordPress version. Sites running the listed fixed version for their release branch, or a later version, have the patch; sites below those releases should be treated as affected.

BIT-wordpress-2020-4048: Medium severity WordPress WordPress vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which WordPress releases contain the fix?

How can I determine whether my site is affected?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which WordPress releases contain the fix?

How can I determine whether my site is affected?