WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden.
Weakness
The product checks the state of a resource before using that resource, but the resource’s state can change between the check and the use in a way that invalidates the results of the check.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wordpress | Wordpress | 4.2 (including) | 6.1.1 (including) |
| Wordpress | Wordpress | 4.1 (including) | 4.1 (including) |
| Wordpress | Ubuntu | bionic | * |
| Wordpress | Ubuntu | focal | * |
| Wordpress | Ubuntu | kinetic | * |
| Wordpress | Ubuntu | lunar | * |
| Wordpress | Ubuntu | mantic | * |
| Wordpress | Ubuntu | oracular | * |
| Wordpress | Ubuntu | plucky | * |
| Wordpress | Ubuntu | trusty | * |
| Wordpress | Ubuntu | xenial | * |