CVE-2017-2217: Medium severity wordpress download manager vulnerability
Published Jul 7, 2017
·Updated
Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected Software
2 affected components
Wpdownloadmanager Wordpress Download Manager Wordpress<=2.9.50
W3eden Download Manager Wordpress<=2.9.50
Remediation
Patch Available
Patch Available
Event History
Jul 7, 2017
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-2217?
CVE-2017-2217 is classified as a high severity open redirect vulnerability.
2
How do I fix CVE-2017-2217?
To fix CVE-2017-2217, update the WordPress Download Manager plugin to version 2.9.51 or later.
3
What causes the vulnerability CVE-2017-2217?
CVE-2017-2217 is caused by improper validation of redirect URLs in the WordPress Download Manager plugin.
4
Who is affected by CVE-2017-2217?
Any website using the WordPress Download Manager plugin versions prior to 2.9.51 is affected by CVE-2017-2217.
5
What type of attacks can CVE-2017-2217 facilitate?
CVE-2017-2217 can facilitate phishing attacks by allowing attackers to redirect users to arbitrary websites.