WordPress.org
Get WordPress

Make WordPress Core

Opened 20 years ago

Closed 20 years ago

Last modified 20 years ago

#3781 closed defect (bug) (fixed)

Vulnerability in nonce AYS

Reported by: PsychoGun Owned by:
Priority: highest omg bbq Milestone: 2.0.9
Component: Security Version: 2.0.7
Severity: blocker Keywords:
Cc: Focuses:

Description

Hi,

I found a vulnerability in wordpress, i made an exploit and i transmitted everything to
these security websites: mil0rwm, securityfocus, secunia ect
E-mail me if you want more specifications.

Change History (11)

#1 @foolswisdom
20 years ago

  • Milestone 2.3 → 2.1.1

#2 @foolswisdom
20 years ago

Please email the details to security@… .

#3 @foolswisdom
20 years ago

LOL, that should be secuirty@… .

#4 @foolswisdom
20 years ago

Alright, I give up, going back to bed: security@…

#5 @Viper007Bond
20 years ago

  • Component Administration → Security

#6 @Nazgul
20 years ago

  • Resolution → fixed
  • Status new → closed

Fixed in [4876]

#7 @ryan
20 years ago

  • Milestone 2.1.1 → 2.0.9
  • Version → 2.0.7

#8 @foolswisdom
20 years ago

  • Severity normal → blocker

Fixed on all branches
2.0.9 [4877]
2.1.1 [4876]
trunk [4875]

#9 @ryan
20 years ago

  • Summary Vulnerability in wordpress → Vulnerability in nonce AYS

#11 @ryan
20 years ago

Fixed for both 2.0.9 and 2.1.1.

Note: See TracTickets for help on using tickets.