CVE-2018-10101

EUVD-2018-2180
Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server.
Open Redirect
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.1 MEDIUM
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 92%
Affected Products (NVD)
VendorProductVersion
wordpresswordpress
𝑥
< 4.9.5
debiandebian_linux
8.0
debiandebian_linux
9.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
wordpress
bookworm
6.1.6+dfsg1-0+deb12u1
fixed
bookworm (security)
6.1.6+dfsg1-0+deb12u1
fixed
bullseye
5.7.11+dfsg1-0+deb11u1
fixed
bullseye (security)
5.7.11+dfsg1-0+deb11u1
fixed
jessie
not-affected
sid
6.6.1+dfsg1-1
fixed
trixie
6.6.1+dfsg1-1
fixed
wheezy
not-affected
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
wordpress
artful
ignored
bionic
not-affected
cosmic
not-affected
disco
not-affected
eoan
not-affected
trusty
dne
xenial
not-affected
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/104350
http://www.securitytracker.com/id/1040836
https://codex.wordpress.org/Version_4.9.5
https://core.trac.wordpress.org/changeset/42894
https://github.com/WordPress/WordPress/commit/804363859602d4050d9a38a21f5a65d9aec18216
https://wordpress.org/news/2018/04/wordpress-4-9-5-security-and-maintenance-release/
https://wpvulndb.com/vulnerabilities/9053
https://www.debian.org/security/2018/dsa-4193
http://www.securityfocus.com/bid/104350
http://www.securitytracker.com/id/1040836
https://codex.wordpress.org/Version_4.9.5
https://core.trac.wordpress.org/changeset/42894
https://github.com/WordPress/WordPress/commit/804363859602d4050d9a38a21f5a65d9aec18216
https://wordpress.org/news/2018/04/wordpress-4-9-5-security-and-maintenance-release/
https://wpvulndb.com/vulnerabilities/9053
https://www.debian.org/security/2018/dsa-4193