CVE-2021-29447

Related Files

WordPress 5.7 Media Library XML Injection

Posted Sep 20, 2021

Authored by David Uton

WordPress version 5.7 suffers from a Media Library XML external entity injection vulnerability.

tags | exploit

advisories | CVE-2021-29447

SHA-256 | f4d5079185c7b7a82974659421942eaed8b4ed45e1818b1ece7631fe12e92485

Download | Favorite | View

XML External Entity Via MP3 File Upload On WordPress

Posted Jun 15, 2021

Authored by Vallari Sharma, Archie Midha

This document illustrates proof of concept exploitation of a vulnerability in WordPress versions 5.6.0 through 5.7.0 that gives a user the ability to upload files on a server and exploit an XML parsing issue in the Media Library using an MP3 file upload that leads to an XXE attack.

tags | exploit, proof of concept, file upload

advisories | CVE-2021-29447

SHA-256 | 6f2b6fbc58bcb6f703bd6d4a439b0bd64de13c645bc50f0f2f21b49152561b36

Download | Favorite | View

Debian Security Advisory 4896-1

Posted Apr 28, 2021

Authored by Debian | Site debian.org

Debian Linux Security Advisory 4896-1 - Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform XML External Entity (XXE) attacks, and access private content.

tags | advisory, remote, web, vulnerability

systems | linux, debian

advisories | CVE-2021-29447, CVE-2021-29450

SHA-256 | e00b69e4ff46ca105c70362ee5ece24f6f93cc7b36e5b41b63549ad18bd8c25b

Download | Favorite | View