What is CVE-2013-2203?

CVE-2013-2203 is a vulnerability in Wordpress, classified under CWE-264. Published 2013-07-08.

Is CVE-2013-2203 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Wordpress

CVE-2013-2203

WordPress before 3.5.2, when the uploads directory forbids write access, allows remote attackers to obtain sensitive information via an invalid upload request, which reveals the absolute path in an XMLHttpRequest error message.

EPSS: 0.020 (79.0th percentile) — read the EPSS interpretation.

Affected products

Wordpress — versions 0.71, 1.0, 1.0.1
N/a — versions n/a

Weakness classification (CWE)

CWE-264

Public proof-of-concept exploits

20142995/nuclei-templates

References

secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)
secalert@redhat.com (vendor-advisory, x_refsource_DEBIAN)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2013-2203?: CVE-2013-2203 is a vulnerability in Wordpress, classified under CWE-264. Published 2013-07-08.
Is CVE-2013-2203 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.