CVE-2020-11026
In affected versions of WordPress, files with a specially crafted name when uploaded to the Media section can lead to script execution upon accessing the file.
Does this matter?
Lower severity and a low EPSS score (2.09%). Track it; it rarely justifies an emergency change on its own.
Description
In affected versions of WordPress, files with a specially crafted name when uploaded to the Media section can lead to script execution upon accessing the file. This requires an authenticated user with privileges to upload files. This has been patched in version 5.4.1, along with all the previously affected versions via a minor release (5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4.6.18, 4.5.21, 4.4.22, 4.3.23, 4.2.27, 4.1.30, 4.0.30, 3.9.31, 3.8.33, 3.7.33).
- CVSS 3.1
- 5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- EPSS
- 2.09% probability · 81th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-707, CWE-79
- Affected
- wordpress/wordpress · debian/debian linux
- Source
- security-advisories@github.com
References
- https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-3gw2-4656-pfr2Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/05/msg00011.htmlMailing List, Third Party Advisory
- https://wordpress.org/support/wordpress-version/version-5-4-1/#security-updatesRelease Notes, Vendor Advisory
- https://www.debian.org/security/2020/dsa-4677Third Party Advisory
- https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-3gw2-4656-pfr2Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/05/msg00011.htmlMailing List, Third Party Advisory
- https://wordpress.org/support/wordpress-version/version-5-4-1/#security-updatesRelease Notes, Vendor Advisory
- https://www.debian.org/security/2020/dsa-4677Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.