Make WordPress Core

Opened 2 years ago

Closed 2 years ago

Last modified 2 years ago

#58245 closed defect (bug) (duplicate)

Request to prioritize WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding

Reported by: jfaguilarsaatchi's profile jfaguilarsaatchi Owned by:
Milestone: Priority: normal
Severity: normal Version:
Component: XML-RPC Keywords:
Focuses: Cc:

Description

Here's a revised version of the request with some improvements:

Dear Support Team,

We've been using Jetpack Protect WP Scann and have encountered an issue related to the vulnerability known as "WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding". We're writing to request your assistance in resolving this issue.

We have made some attempts to neutralize the vulnerability on our end, including blocking XML-RPC from CND, functions.php, and using a plugin specifically designed for this purpose. Additionally, we have turned off Pingbacks and TrackBacks. However, despite these efforts, we have not been able to achieve a "Passing Grade" using the Jetpack Protect Plugin.

This is a known security issue, so I am not reporting it, I´m asking if a future WP release could provide a solution as it is a source of preocupation in the department.

We hope that you will consider this issue in your next release, as it is a point of concern for our users. We appreciate your attention to this matter and look forward to hearing back from you soon.

Best regards,
Juan

Change History (2)

#1 @samiamnot
2 years ago

  • Resolution set to duplicate
  • Status changed from new to closed

Duplicate of #57363.

#2 @johnbillion
2 years ago

  • Milestone Awaiting Review deleted
Note: See TracTickets for help on using tickets.