{"dataType": "CVE_RECORD", "dataVersion": "5.0", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2020-11027", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "assignerShortName": "GitHub_M", "dateUpdated": "2023-06-20T00:00:00", "dateReserved": "2020-03-30T00:00:00", "datePublished": "2020-04-30T00:00:00"}, "containers": {"cna": {"title": "Password reset links invalidation issue in WordPress", "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2023-06-20T00:00:00"}, "descriptions": [{"lang": "en", "value": "In affected versions of WordPress, a password reset link emailed to a user does not expire upon changing the user password. Access would be needed to the email account of the user by a malicious party for successful execution. This has been patched in version 5.4.1, along with all the previously affected versions via a minor release (5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4.6.18, 4.5.21, 4.4.22, 4.3.23, 4.2.27, 4.1.30, 4.0.30, 3.9.31, 3.8.33, 3.7.33)."}], "affected": [{"vendor": "WordPress", "product": "WordPress", "versions": [{"version": ">= 5.4.0, < 5.4.1", "status": "affected"}, {"version": ">= 5.3.0, < 5.3.3", "status": "affected"}, {"version": ">= 5.2.0, < 5.2.6", "status": "affected"}, {"version": ">= 5.1.0, < 5.1.5", "status": "affected"}, {"version": ">= 5.0.0, < 5.0.9", "status": "affected"}, {"version": ">= 4.9.0, < 4.9.14", "status": "affected"}, {"version": ">= 4.8.0, < 4.8.13", "status": "affected"}, {"version": ">= 4.7.0, < 4.7.17", "status": "affected"}, {"version": ">= 4.6.0, < 4.6.18", "status": "affected"}, {"version": ">= 4.5.0, < 4.5.21", "status": "affected"}, {"version": ">= 4.4.0, < 4.4.22", "status": "affected"}, {"version": ">= 4.3.0, < 4.3.23", "status": "affected"}, {"version": ">= 4.2.0, < 4.2.27", "status": "affected"}, {"version": ">= 4.1.0, < 4.1.30", "status": "affected"}, {"version": ">= 4.0.0, < 4.0.30", "status": "affected"}, {"version": ">= 3.9.0, < 3.9.31", "status": "affected"}, {"version": ">= 3.8.0, < 3.8.33", "status": "affected"}, {"version": ">= 3.7.0, < 3.7.33", "status": "affected"}]}], "references": [{"url": "https://wordpress.org/support/wordpress-version/version-5-4-1/#security-updates"}, {"url": "https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-ww7v-jg8c-q6jw"}, {"name": "DSA-4677", "tags": ["vendor-advisory"], "url": "https://www.debian.org/security/2020/dsa-4677"}, {"name": "[debian-lts-announce] 20200511 [SECURITY] [DLA 2208-1] wordpress security update", "tags": ["mailing-list"], "url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00011.html"}, {"url": "http://packetstormsecurity.com/files/173034/WordPress-Theme-Medic-1.0.0-Weak-Password-Recovery-Mechanism.html"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-672: Operation on a Resource after Expiration or Release", "cweId": "CWE-672"}]}], "source": {"advisory": "GHSA-ww7v-jg8c-q6jw", "discovery": "UNKNOWN"}}}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43", "vulnerable": true}, {"criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252", "vulnerable": true}, {"criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*", "matchCriteriaId": "AFDCD9BA-05B3-4EE5-ABE7-A6DF77F1DEB4", "versionEndExcluding": "3.7.33", "versionStartIncluding": "3.7", "vulnerable": true}, {"criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*", "matchCriteriaId": "8BE6D23B-B8DA-4013-812D-329D765729B3", "versionEndExcluding": "3.8.33", "versionStartIncluding": "3.8", "vulnerable": true}, {"criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*", "matchCriteriaId": "B249947E-34C8-4319-A756-3095210C86BE", "versionEndExcluding": "3.9.31", "versionStartIncluding": "3.9", "vulnerable": true}, {"criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*", "matchCriteriaId": "222FACD8-E13D-43F0-9EB8-D3837534BE61", "versionEndExcluding": "4.0.30", "versionStartIncluding": "4.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*", "matchCriteriaId": "4F37A9AE-0368-46E5-9163-0E77860D967E", "versionEndExcluding": "4.1.30", "versionStartIncluding": "4.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*", "matchCriteriaId": "FC97B598-CD50-4501-8368-97160D885596", "versionEndExcluding": "4.2.27", "versionStartIncluding": "4.2", "vulnerable": true}, {"criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*", "matchCriteriaId": "E071B431-86C3-4DD0-B7D6-7581E53E4398", "versionEndExcluding": "4.3.23", "versionStartIncluding": "4.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*", "matchCriteriaId": "65D50EA1-08F5-4F17-B47D-2CABE77B7101", "versionEndExcluding": "4.4.22", "versionStartIncluding": "4.4", "vulnerable": true}, {"criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*", "matchCriteriaId": "EE8BFCAE-36A9-4017-B484-766AA82A517B", "versionEndExcluding": "4.5.21", "versionStartIncluding": "4.5", "vulnerable": true}, {"criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*", "matchCriteriaId": "0A44AAFC-3FB1-4FB9-BBE9-6FB8E553AC55", "versionEndExcluding": "4.6.18", "versionStartIncluding": "4.6", "vulnerable": true}, {"criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*", "matchCriteriaId": "1C2F3EB4-8D53-4E73-99CB-6D4DB18862CB", "versionEndExcluding": "4.7.17", "versionStartIncluding": "4.7", "vulnerable": true}, {"criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*", "matchCriteriaId": "4A2168FB-94B6-4B89-A205-B8806668C56C", "versionEndExcluding": "4.8.13", "versionStartIncluding": "4.8", "vulnerable": true}, {"criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*", "matchCriteriaId": "D6B09641-582C-4BC9-B0A8-976CC4CB2F9C", "versionEndExcluding": "4.9.14", "versionStartIncluding": "4.9", "vulnerable": true}, {"criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*", "matchCriteriaId": "29C2D12B-4F1B-4473-A23B-C923FA1EF442", "versionEndExcluding": "5.0.9", "versionStartIncluding": "5.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*", "matchCriteriaId": "4E6ACD77-B8AA-40ED-8F43-F7AE245556FE", "versionEndExcluding": "5.1.5", "versionStartIncluding": "5.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*", "matchCriteriaId": "0AA6DEC1-5040-4D00-9A01-F2C0A2D071D3", "versionEndExcluding": "5.2.6", "versionStartIncluding": "5.2", "vulnerable": true}, {"criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*", "matchCriteriaId": "E1FA1821-19B3-482D-BCA1-3F2E22A7B603", "versionEndExcluding": "5.3.3", "versionStartIncluding": "5.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:wordpress:wordpress:5.4:*:*:*:*:*:*:*", "matchCriteriaId": "46EA68C0-B847-447C-BB19-1C440F0A761D", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "In affected versions of WordPress, a password reset link emailed to a user does not expire upon changing the user password. Access would be needed to the email account of the user by a malicious party for successful execution. This has been patched in version 5.4.1, along with all the previously affected versions via a minor release (5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4.6.18, 4.5.21, 4.4.22, 4.3.23, 4.2.27, 4.1.30, 4.0.30, 3.9.31, 3.8.33, 3.7.33)."}, {"lang": "es", "value": "En las versiones afectadas de WordPress, un enlace de restablecimiento de contrase\u00f1a enviado por correo electr\u00f3nico a un usuario no caduca tras cambiar la contrase\u00f1a del usuario. Se necesitar\u00eda el acceso a la cuenta de correo electr\u00f3nico del usuario por una parte maliciosa para una ejecuci\u00f3n con \u00e9xito. Esto ha sido corregido en la versi\u00f3n 5.4.1, junto con todas las versiones afectadas anteriormente por medio de una versi\u00f3n menor (versiones 5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4.6.18, 4.5.21, 4.4.22, 4.3.23, 4.2.27, 4.1.30, 4.0.30, 3.9.31, 3.8.33, 3.7.33)."}], "id": "CVE-2020-11027", "lastModified": "2023-06-20T16:15:09.463", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 5.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 4.0, "source": "security-advisories@github.com", "type": "Secondary"}]}, "published": "2020-04-30T23:15:11.607", "references": [{"source": "security-advisories@github.com", "url": "http://packetstormsecurity.com/files/173034/WordPress-Theme-Medic-1.0.0-Weak-Password-Recovery-Mechanism.html"}, {"source": "security-advisories@github.com", "tags": ["Third Party Advisory"], "url": "https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-ww7v-jg8c-q6jw"}, {"source": "security-advisories@github.com", "tags": ["Mailing List", "Third Party Advisory"], "url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00011.html"}, {"source": "security-advisories@github.com", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://wordpress.org/support/wordpress-version/version-5-4-1/#security-updates"}, {"source": "security-advisories@github.com", "tags": ["Third Party Advisory"], "url": "https://www.debian.org/security/2020/dsa-4677"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-672"}], "source": "security-advisories@github.com", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-640"}], "source": "nvd@nist.gov", "type": "Secondary"}]}

{}