CVE-2017-17092

MEDIUM NUCLEI

WordPress < 4.9.1 - Authenticated JavaScript File Upload

Title source: nuclei
STIX 2.1

Exploitation Summary

CVE-2017-17092 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

Description

wp-includes/functions.php in WordPress before 4.9.1 does not require the unfiltered_html capability for upload of .js files, which might allow remote attackers to conduct XSS attacks via a crafted file.

Nuclei Templates (1)

WordPress < 4.9.1 - Authenticated JavaScript File Upload
MEDIUMVERIFIEDby 0x_Akoko
Shodan: http.component:"wordpress"
FOFA: body="oembed" && body="wp-"

References (7)

Core 7
Core References
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2018/dsa-4090
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2017/12/msg00019.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/102024
Patch, Release Notes, Vendor Advisory x_refsource_misc
https://codex.wordpress.org/Version_4.9.1
Third Party Advisory, VDB Entry x_refsource_misc
https://wpvulndb.com/vulnerabilities/8966

Scores

CVSS v3 5.4
EPSS 0.0413
EPSS Percentile 89.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (4)
debian/debian_linux 7.0
debian/debian_linux 8.0
debian/debian_linux 9.0
wordpress/wordpress < 4.9.1
Published Dec 02, 2017
Tracked Since Feb 18, 2026