CVE-2015-3439

Cross-site scripting (XSS) vulnerability in the Ephox (formerly Moxiecode) plupload.flash.swf shim 2.1.2 in Plupload, as used in WordPress 3.9.x, 4.0.x, and 4.1.x before 4.1.2 and other products, allows remote attackers to execute same-origin JavaScript functions via the target parameter, as demonstrated by executing a certain click function, related to _init.as and _fireEvent.as.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://codex.wordpress.org/Version_4.1.2	Exploit Patch
https://core.trac.wordpress.org/changeset/32168
https://wordpress.org/news/2015/04/wordpress-4-1-2/	Exploit Vendor Advisory
http://zoczus.blogspot.com/2015/04/plupload-same-origin-method-execution.html	Exploit
http://www.debian.org/security/2015/dsa-3250
https://wpvulndb.com/vulnerabilities/7933
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158271.html
http://www.securitytracker.com/id/1032207
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158278.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157391.html
http://www.securityfocus.com/bid/74269

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:debian:debian_linux:8.0:::::::*
	cpe:2.3:o:debian:debian_linux:7.0:::::::*

Configuration 2 (hide)

OR	cpe:2.3:a:wordpress:wordpress:3.9.3:::::::*
	cpe:2.3:a:wordpress:wordpress:4.0:::::::*
	cpe:2.3:a:wordpress:wordpress:3.9.0:::::::*
	cpe:2.3:a:wordpress:wordpress:4.1.1:::::::*
	cpe:2.3:a:wordpress:wordpress:3.9.1:::::::*
	cpe:2.3:a:wordpress:wordpress:3.9.2:::::::*
	cpe:2.3:a:wordpress:wordpress:4.0.1:::::::*
	cpe:2.3:a:wordpress:wordpress:4.1:::::::*

Information

Published : 2015-08-05 03:59

Updated : 2016-12-05 19:01

NVD link : CVE-2015-3439

Mitre link : CVE-2015-3439

JSON object : View

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

Products Affected

debian

debian_linux

wordpress

wordpress

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://codex.wordpress.org/Version_4.1.2", "name": "http://codex.wordpress.org/Version_4.1.2", "tags": ["Exploit", "Patch"], "refsource": "CONFIRM"}, {"url": "https://core.trac.wordpress.org/changeset/32168", "name": "https://core.trac.wordpress.org/changeset/32168", "tags": [], "refsource": "CONFIRM"}, {"url": "https://wordpress.org/news/2015/04/wordpress-4-1-2/", "name": "https://wordpress.org/news/2015/04/wordpress-4-1-2/", "tags": ["Exploit", "Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://zoczus.blogspot.com/2015/04/plupload-same-origin-method-execution.html", "name": "http://zoczus.blogspot.com/2015/04/plupload-same-origin-method-execution.html", "tags": ["Exploit"], "refsource": "MISC"}, {"url": "http://www.debian.org/security/2015/dsa-3250", "name": "DSA-3250", "tags": [], "refsource": "DEBIAN"}, {"url": "https://wpvulndb.com/vulnerabilities/7933", "name": "https://wpvulndb.com/vulnerabilities/7933", "tags": [], "refsource": "MISC"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158271.html", "name": "FEDORA-2015-6808", "tags": [], "refsource": "FEDORA"}, {"url": "http://www.securitytracker.com/id/1032207", "name": "1032207", "tags": [], "refsource": "SECTRACK"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158278.html", "name": "FEDORA-2015-6790", "tags": [], "refsource": "FEDORA"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157391.html", "name": "FEDORA-2015-6778", "tags": [], "refsource": "FEDORA"}, {"url": "http://www.securityfocus.com/bid/74269", "name": "74269", "tags": [], "refsource": "BID"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the Ephox (formerly Moxiecode) plupload.flash.swf shim 2.1.2 in Plupload, as used in WordPress 3.9.x, 4.0.x, and 4.1.x before 4.1.2 and other products, allows remote attackers to execute same-origin JavaScript functions via the target parameter, as demonstrated by executing a certain click function, related to _init.as and _fireEvent.as."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-79"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2015-3439", "ASSIGNER": "security@debian.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "severity": "MEDIUM", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}}, "publishedDate": "2015-08-05T10:59Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:wordpress:wordpress:3.9.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:wordpress:wordpress:4.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:wordpress:wordpress:3.9.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:wordpress:wordpress:4.1.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:wordpress:wordpress:3.9.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:wordpress:wordpress:3.9.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:wordpress:wordpress:4.0.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:wordpress:wordpress:4.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2016-12-06T03:01Z"}