WordPress 2.9.2-4.8.1 - Open Redirect



Description
An open redirect was discovered on the user and term edit screens. Reported by Yasin Soliman (ysx).

Affects WordPresses

fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.7.6
fixed in version 4.7.6
fixed in version 4.7.6
fixed in version 4.7.6
fixed in version 4.7.6
fixed in version 4.7.6
fixed in version 4.6.7
fixed in version 4.6.7
fixed in version 4.6.7
fixed in version 4.6.7
fixed in version 4.6.7
fixed in version 4.6.7
fixed in version 4.6.7
fixed in version 4.5.10
fixed in version 4.5.10
fixed in version 4.5.10
fixed in version 4.5.10
fixed in version 4.5.10
fixed in version 4.5.10
fixed in version 4.5.10
fixed in version 4.5.10
fixed in version 4.5.10
fixed in version 4.5.10
fixed in version 4.4.11
fixed in version 4.4.11
fixed in version 4.4.11
fixed in version 4.4.11
fixed in version 4.4.11
fixed in version 4.4.11
fixed in version 4.4.11
fixed in version 4.4.11
fixed in version 4.4.11
fixed in version 4.4.11
fixed in version 4.4.11
fixed in version 4.3.12
fixed in version 4.3.12
fixed in version 3.9.20
fixed in version 4.3.12
fixed in version 4.3.12
fixed in version 4.3.12
fixed in version 4.3.12
fixed in version 4.3.12
fixed in version 4.3.12
fixed in version 4.3.12
fixed in version 4.3.12
fixed in version 4.3.12
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2

References

CVE 2017-14725
URL https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/
URL https://core.trac.wordpress.org/changeset/41398

Classification

Type REDIRECT
OWASP Top 10 A10: Unvalidated Redirects and Forwards
CWE CWE-601

Miscellaneous

Submitter alykode
Views 8833
Verified No
WPVDB ID 8910

Timeline

Publicly Published 2017-09-20 (almost 2 years ago)
Added 2017-09-25 (almost 2 years ago)
Last Updated 2018-08-29 (11 months ago)