Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2018-6389

UNKNOWN
Published 2018-02-06T17:00:00
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2018-6389. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (from wp-includes/script-loader.php) to construct a series of requests to load every file many times.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

WordPress Vulnerability

Identified and analyzed by Wordfence

Software Type

Core

Patch Status

Patched

Published

February 5, 2018

Software Details

Software Name

WordPress

Software Slug

wordpress

Affected Versions

[*, 5.0)

Patched Versions

5.0

Remediation

Update to version 5.0, or a newer patched version

References

https://www.wordfence.com/threat-intel/vulnerabilities/id/1d5987cd-1304-487c-8d1c-cab0510fbb84?source=api-prod

© Defiant Inc. Data provided by Wordfence.

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed HIGH

GHSA-pxcx-cprx-mr28

Advisory Details

In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (from wp-includes/script-loader.php) to construct a series of requests to load every file many times.

CVSS Scoring

CVSS Score

7.5

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2018-6389
WEB https://baraktawily.blogspot.fr/2018/02/how-to-dos-29-of-world-wide-websites.html
WEB https://github.com/UltimateHackers/Shiva
WEB https://github.com/WazeHell/CVE-2018-6389
WEB https://thehackernews.com/2018/02/wordpress-dos-exploit.html
WEB https://wpvulndb.com/vulnerabilities/9021
WEB https://www.exploit-db.com/exploits/43968
WEB http://www.securityfocus.com/bid/103060
WEB http://www.securitytracker.com/id/1040347

Advisory provided by GitHub Security Advisory Database. Published: May 14, 2022, Modified: May 14, 2022

References

http://www.securityfocus.com/bid/103060
https://wpvulndb.com/vulnerabilities/9021
https://www.exploit-db.com/exploits/43968/
https://baraktawily.blogspot.fr/2018/02/how-to-dos-29-of-world-wide-websites.html
http://www.securitytracker.com/id/1040347
https://thehackernews.com/2018/02/wordpress-dos-exploit.html
https://github.com/WazeHell/CVE-2018-6389
https://github.com/UltimateHackers/Shiva

HackerOne Reports

CVE-2018-6389 exploitation - using scripts loader Medium
0xazanul
Publitas
View Report
CVE-2018-6389 exploitation - using scripts loader High
lmhu
MTN Group
Business Logic Errors
View Report
DoS of https://blog.yelp.com/ and other WP instances via CVE-2018-6389 Medium
muhammaddaffa
Yelp
View Report
CVE-2018-6389 exploitation - using scripts loader Low
salokin
Fastly VDP
Uncontrolled Resource Consumption
View Report
DoS of https://nordvpn.com/ via CVE-2018-6389 exploitation Low
cassiomcampos
Nord Security
View Report
scripts loader DOS vulnerability Medium
badisman
FormAssembly
Improper Restriction of Authentication Attempts
View Report
scripts loader (denial of service) vulnerability Low
badisman
MariaDB
Uncontrolled Resource Consumption
View Report
DoS at ████████ (CVE-2018-6389) Critical
raditz
U.S. Dept Of Defense
Uncontrolled Resource Consumption
View Report
DoS at █████(CVE-2018-6389) Critical
a4hamkhan
U.S. Dept Of Defense
Uncontrolled Resource Consumption
View Report
load scripts DOS vulnerability Medium
badisman
OLX
Uncontrolled Resource Consumption
View Report
[mtn.com.af] Multiple vulnerabilities allow to Application level DoS High
lmhu
MTN Group
Business Logic Errors
View Report
Dos https://iandunn.name/ via CVE-2018-6389 exploitation None
bruteforce
Ian Dunn
View Report
Possibility of DoS attack at https://sifchain.finance// via CVE-2018-6389 exploitation None
spyata
Sifchain
View Report
Published: 2018-02-06T17:00:00
Last Modified: 2024-08-05T06:01:49.194Z
Copied to clipboard!