CVE-2012-0937
EPSS 8.1%
描述
wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MySQL queries sent to external MySQL database servers, which allows remote attackers to use WordPress as a proxy for brute-force attacks or denial of service attacks via the dbhost parameter, a different vulnerability than CVE-2011-4898. NOTE: the vendor disputes the significance of this issue because an incomplete WordPress installation might be present on the network for only a short time
如何修補 CVE-2012-0937
目前尚未發布修補版本。可考慮移除受影響套件,或參考下方連結中的上游建議。
- Debian/wordpress—未列出修補版本
CVE-2012-0937 正在被利用嗎?
中等 — EPSS 為 8.1%,可持續追蹤但非最高優先。
受影響套件(1)
- from 0