{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003e\u003cSPAN class=\"textit\"\u003eWordPress\u003c/SPAN\u003e versions 2.3.1 et  ant\u00e9rieures.\u003c/P\u003e",
  "content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans WordPress.\n\nL\u0027une d\u0027entre elles permet d\u0027afficher le contenu d\u0027un document en\nattente de validation. Certains messages d\u0027erreur permettent d\u0027obtenir\ndes informations sur la structure de la base de donn\u00e9es. Enfin, il est\npossible d\u0027acc\u00e9der \u00e0 des informations via des fuites de m\u00e9moire dans les\nimpl\u00e9mentations de XML-RPC et de APP.\n\n## Solution\n\nMettre \u00e0 jour en version 2.3.2 (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2008-01-21T00:00:00",
  "last_revision_date": "2008-01-21T00:00:00",
  "links": [
    {
      "title": "Notes de version WordPress 2.3.2 :",
      "url": "http://wordpress.org/development/2007/12/wordpress-232/"
    },
    {
      "title": "T\u00e9l\u00e9chargement de la derni\u00e8re version de WordPress :",
      "url": "http://wordpress.org/download/"
    }
  ],
  "reference": "CERTA-2008-AVI-031",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2008-01-21T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Plusieurs vuln\u00e9rabilit\u00e9s dans \u003cspan class=\"textit\"\u003eWordPress\u003c/span\u003e\npermettent d\u0027obtenir des informations sur la structure de la base de\ndonn\u00e9es et sur des documents en attente de validation.\n",
  "title": "Vuln\u00e9rabilit\u00e9s dans WordPress",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Notes de version de WordPress 2.3.2",
      "url": null
    }
  ]
}