CVE-2017-17091

CVE-2017-17091

wp-admin/user-new.php in WordPress before 4.9.1 sets the newbloguser key to a string that can be directly derived from the user ID, which allows remote attackers to bypass intended access restrictions by entering this string.

Source: CVE-2017-17091

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다