cvelistv5 - cve-2024-6305

CVE-2024-6305 (GCVE-0-2024-6305)

Vulnerability from cvelistv5 – Published: 2024-06-25 11:09 – Updated: 2024-06-25 16:59

**REJECT** Accidental Reservation making this a duplicate. Please use CVE-2024-31111.

Show details on NVD website

{
  "containers": {
    "cna": {
      "providerMetadata": {
        "dateUpdated": "2024-06-25T16:59:45.159Z",
        "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
        "shortName": "Wordfence"
      },
      "rejectedReasons": [
        {
          "lang": "en",
          "value": "**REJECT** Accidental Reservation making this a duplicate. Please use CVE-2024-31111."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
    "assignerShortName": "Wordfence",
    "cveId": "CVE-2024-6305",
    "datePublished": "2024-06-25T11:09:21.240Z",
    "dateRejected": "2024-06-25T16:59:45.159Z",
    "dateReserved": "2024-06-25T11:09:20.608Z",
    "dateUpdated": "2024-06-25T16:59:45.159Z",
    "state": "REJECTED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Rejected reason: **REJECT** Accidental Reservation making this a duplicate. Please use CVE-2024-31111.\"}]",
      "id": "CVE-2024-6305",
      "lastModified": "2024-06-25T17:15:11.020",
      "published": "2024-06-25T11:15:50.420",
      "sourceIdentifier": "security@wordfence.com",
      "vulnStatus": "Rejected"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-6305\",\"sourceIdentifier\":\"security@wordfence.com\",\"published\":\"2024-06-25T11:15:50.420\",\"lastModified\":\"2024-06-25T17:15:11.020\",\"vulnStatus\":\"Rejected\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Rejected reason: **REJECT** Accidental Reservation making this a duplicate. Please use CVE-2024-31111.\"}],\"metrics\":{},\"references\":[]}}",
    "vulnrichment": {
      "containers": "{\"cna\": {\"rejectedReasons\": [{\"lang\": \"en\", \"value\": \"**REJECT** Accidental Reservation making this a duplicate. Please use CVE-2024-31111.\"}], \"providerMetadata\": {\"orgId\": \"b15e7b5b-3da4-40ae-a43c-f7aa60e62599\", \"shortName\": \"Wordfence\", \"dateUpdated\": \"2024-06-25T16:59:45.159Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-6305\", \"assignerOrgId\": \"b15e7b5b-3da4-40ae-a43c-f7aa60e62599\", \"state\": \"REJECTED\", \"assignerShortName\": \"Wordfence\", \"dateReserved\": \"2024-06-25T11:09:20.608Z\", \"datePublished\": \"2024-06-25T11:09:21.240Z\", \"dateUpdated\": \"2024-06-25T16:59:45.159Z\", \"dateRejected\": \"2024-06-25T16:59:45.159Z\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

NCSC-2024-0266

Vulnerability from csaf_ncscnl - Published: 2024-06-25 12:19 - Updated: 2024-06-25 12:19

Summary

Kwetsbaarheden verholpen in WordPress

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten

De ontwikkelaars van WordPress hebben kwetsbaarheden verholpen in WordPress.

Interpretaties

Een kwaadwillende kan de kwetsbaarheden misbruiken om een Cross-Site-Scripting-aanval uit te voeren. Een dergelijke aanval kan leiden tot uitvoer van willekeurige code in de browser van het slachtoffer, of mogelijk toegang tot gevoelige gegevens in de context van de browser van het slachtoffer.

Oplossingen

Wordpress heeft updates uitgebracht om de kwetsbaarheden te verhelpen in v 6.5.5. Zie bijgevoegde referenties voor meer informatie.

Kans

medium

Schade

high

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "De ontwikkelaars van WordPress hebben kwetsbaarheden verholpen in WordPress.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om een Cross-Site-Scripting-aanval uit te voeren. Een dergelijke aanval kan leiden tot uitvoer van willekeurige code in de browser van het slachtoffer, of mogelijk toegang tot gevoelige gegevens in de context van de browser van het slachtoffer.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Wordpress heeft updates uitgebracht om de kwetsbaarheden te verhelpen in v 6.5.5. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
        "title": "CWE-79"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd",
        "url": "https://wordpress.org/news/2024/06/wordpress-6-5-5/"
      }
    ],
    "title": "Kwetsbaarheden verholpen in WordPress",
    "tracking": {
      "current_release_date": "2024-06-25T12:19:50.298884Z",
      "id": "NCSC-2024-0266",
      "initial_release_date": "2024-06-25T12:19:50.298884Z",
      "revision_history": [
        {
          "date": "2024-06-25T12:19:50.298884Z",
          "number": "0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "wordpress",
            "product": {
              "name": "wordpress",
              "product_id": "CSAFPID-1487610",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:wordpress_foundation:wordpress:5.9:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "wordpress",
            "product": {
              "name": "wordpress",
              "product_id": "CSAFPID-1487611",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:wordpress_foundation:wordpress:5.9.9:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "wordpress",
            "product": {
              "name": "wordpress",
              "product_id": "CSAFPID-1465234",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:wordpress_foundation:wordpress:6.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "wordpress",
            "product": {
              "name": "wordpress",
              "product_id": "CSAFPID-1487612",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:wordpress_foundation:wordpress:6.0.8:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "wordpress",
            "product": {
              "name": "wordpress",
              "product_id": "CSAFPID-1465236",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:wordpress_foundation:wordpress:6.1:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "wordpress",
            "product": {
              "name": "wordpress",
              "product_id": "CSAFPID-1487613",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:wordpress_foundation:wordpress:6.1.6:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "wordpress",
            "product": {
              "name": "wordpress",
              "product_id": "CSAFPID-1465238",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:wordpress_foundation:wordpress:6.2:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "wordpress",
            "product": {
              "name": "wordpress",
              "product_id": "CSAFPID-1487614",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:wordpress_foundation:wordpress:6.2.5:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "wordpress",
            "product": {
              "name": "wordpress",
              "product_id": "CSAFPID-1465240",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:wordpress_foundation:wordpress:6.3:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "wordpress",
            "product": {
              "name": "wordpress",
              "product_id": "CSAFPID-1487615",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:wordpress_foundation:wordpress:6.3.4:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "wordpress",
            "product": {
              "name": "wordpress",
              "product_id": "CSAFPID-1465242",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:wordpress_foundation:wordpress:6.4:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "wordpress",
            "product": {
              "name": "wordpress",
              "product_id": "CSAFPID-1487616",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:wordpress_foundation:wordpress:6.4.4:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "wordpress",
            "product": {
              "name": "wordpress",
              "product_id": "CSAFPID-1465244",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:wordpress_foundation:wordpress:6.5:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "wordpress",
            "product": {
              "name": "wordpress",
              "product_id": "CSAFPID-1487617",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:wordpress_foundation:wordpress:6.5.4:*:*:*:*:*:*:*"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "wordpress_foundation"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-6305",
      "product_status": {
        "known_affected": [
          "CSAFPID-1487610",
          "CSAFPID-1487611",
          "CSAFPID-1465234",
          "CSAFPID-1487612",
          "CSAFPID-1465236",
          "CSAFPID-1487613",
          "CSAFPID-1465238",
          "CSAFPID-1487614",
          "CSAFPID-1465240",
          "CSAFPID-1487615",
          "CSAFPID-1465242",
          "CSAFPID-1487616",
          "CSAFPID-1465244",
          "CSAFPID-1487617"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-6305",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-6305.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1487610",
            "CSAFPID-1487611",
            "CSAFPID-1465234",
            "CSAFPID-1487612",
            "CSAFPID-1465236",
            "CSAFPID-1487613",
            "CSAFPID-1465238",
            "CSAFPID-1487614",
            "CSAFPID-1465240",
            "CSAFPID-1487615",
            "CSAFPID-1465242",
            "CSAFPID-1487616",
            "CSAFPID-1465244",
            "CSAFPID-1487617"
          ]
        }
      ],
      "title": "CVE-2024-6305"
    },
    {
      "cve": "CVE-2024-6307",
      "product_status": {
        "known_affected": [
          "CSAFPID-1487610",
          "CSAFPID-1487611",
          "CSAFPID-1465234",
          "CSAFPID-1487612",
          "CSAFPID-1465236",
          "CSAFPID-1487613",
          "CSAFPID-1465238",
          "CSAFPID-1487614",
          "CSAFPID-1465240",
          "CSAFPID-1487615",
          "CSAFPID-1465242",
          "CSAFPID-1487616",
          "CSAFPID-1465244",
          "CSAFPID-1487617"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-6307",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-6307.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1487610",
            "CSAFPID-1487611",
            "CSAFPID-1465234",
            "CSAFPID-1487612",
            "CSAFPID-1465236",
            "CSAFPID-1487613",
            "CSAFPID-1465238",
            "CSAFPID-1487614",
            "CSAFPID-1465240",
            "CSAFPID-1487615",
            "CSAFPID-1465242",
            "CSAFPID-1487616",
            "CSAFPID-1465244",
            "CSAFPID-1487617"
          ]
        }
      ],
      "title": "CVE-2024-6307"
    }
  ]
}

GHSA-FFJ2-4HGP-MVGH

Vulnerability from github – Published: 2024-06-25 12:30 – Updated: 2024-06-25 12:30

Details

WordPress Core is vulnerable to Stored Cross-Site Scripting via the Template Part Block in various versions up to 6.5.5 due to insufficient input sanitization and output escaping on the 'tagName' attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Severity ?

6.4 (Medium)


                  
                    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-6305"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-06-25T11:15:50Z",
    "severity": "MODERATE"
  },
  "details": "WordPress Core is vulnerable to Stored Cross-Site Scripting via the Template Part Block in various versions up to 6.5.5 due to insufficient input sanitization and output escaping on the \u0027tagName\u0027 attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
  "id": "GHSA-ffj2-4hgp-mvgh",
  "modified": "2024-06-25T12:30:57Z",
  "published": "2024-06-25T12:30:57Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6305"
    },
    {
      "type": "WEB",
      "url": "https://core.trac.wordpress.org/changeset/58471"
    },
    {
      "type": "WEB",
      "url": "https://wordpress.org/news/2024/06/wordpress-6-5-5"
    },
    {
      "type": "WEB",
      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2a225ccb-a7dc-4437-bd97-b309d6ae6a47?source=cve"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
      "type": "CVSS_V3"
    }
  ]
}

WID-SEC-W-2024-1454

Vulnerability from csaf_certbund - Published: 2024-06-25 22:00 - Updated: 2024-06-25 22:00

Summary

WordPress: Mehrere Schwachstellen

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung

WordPress ist ein PHP basiertes Open Source Blog-System.

Angriff

Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in WordPress ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten oder Dateien zu manipulieren.

Betroffene Betriebssysteme

- Linux - MacOS X - Windows

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "WordPress ist ein PHP basiertes Open Source Blog-System.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in WordPress ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten oder Dateien zu manipulieren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- MacOS X\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-1454 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1454.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-1454 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1454"
      },
      {
        "category": "external",
        "summary": "Wordpress Release Notes vom 2024-06-25",
        "url": "https://wordpress.org/news/2024/06/wordpress-6-5-5/"
      },
      {
        "category": "external",
        "summary": "Red Hat Bugtracker vom 2024-06-25",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2294204"
      }
    ],
    "source_lang": "en-US",
    "title": "WordPress: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2024-06-25T22:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T18:10:34.770+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2024-1454",
      "initial_release_date": "2024-06-25T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-06-25T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c6.5.5",
                "product": {
                  "name": "Open Source WordPress \u003c6.5.5",
                  "product_id": "T035638"
                }
              }
            ],
            "category": "product_name",
            "name": "WordPress"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-6305",
      "notes": [
        {
          "category": "description",
          "text": "In WordPress existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in HTML-API und Template Part nicht ordnungsgem\u00e4\u00df \u00fcberpr\u00fcft, bevor sie an den Benutzer zur\u00fcckgegeben werden. Ein entfernter, authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausf\u00fchren."
        }
      ],
      "release_date": "2024-06-25T22:00:00.000+00:00",
      "title": "CVE-2024-6305"
    },
    {
      "cve": "CVE-2024-6307",
      "notes": [
        {
          "category": "description",
          "text": "In WordPress existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in HTML-API und Template Part nicht ordnungsgem\u00e4\u00df \u00fcberpr\u00fcft, bevor sie an den Benutzer zur\u00fcckgegeben werden. Ein entfernter, authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausf\u00fchren."
        }
      ],
      "release_date": "2024-06-25T22:00:00.000+00:00",
      "title": "CVE-2024-6307"
    },
    {
      "cve": "CVE-2024-6306",
      "notes": [
        {
          "category": "description",
          "text": "Es besteht eine Schwachstelle in WordPress. Dieser Fehler besteht im Template Part Block aufgrund einer unsachgem\u00e4\u00dfen Eingabevalidierung, die zu einem Directory Traversal Problem f\u00fchrt. Ein entfernter, authentifizierter Angreifer kann diese Schwachstelle ausnutzen, um beliebige HTML-Dateien auf Sites unter Windows einzubinden."
        }
      ],
      "release_date": "2024-06-25T22:00:00.000+00:00",
      "title": "CVE-2024-6306"
    }
  ]
}

FKIE_CVE-2024-6305

Vulnerability from fkie_nvd - Published: 2024-06-25 11:15 - Updated: 2024-06-25 17:15

Severity ?

Summary

Rejected reason: **REJECT** Accidental Reservation making this a duplicate. Please use CVE-2024-31111.

References

	URL	Tags

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Rejected reason: **REJECT** Accidental Reservation making this a duplicate. Please use CVE-2024-31111."
    }
  ],
  "id": "CVE-2024-6305",
  "lastModified": "2024-06-25T17:15:11.020",
  "metrics": {},
  "published": "2024-06-25T11:15:50.420",
  "references": [],
  "sourceIdentifier": "security@wordfence.com",
  "vulnStatus": "Rejected"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2024-6305 (GCVE-0-2024-6305)

NCSC-2024-0266

GHSA-FFJ2-4HGP-MVGH

WID-SEC-W-2024-1454

FKIE_CVE-2024-6305

Tags

Sightings

Nomenclature