International Conference on Data and Software Engineering

Running head: UNDERSTANDING WORDPRESS CVE-2019-17669
Understanding WordPress CVE-2019-17669
Name of the student:
Name of the university:
Author Note

UNDERSTANDING WORDPRESS CVE-2019-17669
1
Executive summary
A kind of critical vulnerability has been there in WordPress till 5.2.3. This has influenced the aspects
that are the unknown functionality regarding the elements of URL Handlers. Apart from that, this
manipulation with different unknown inputs leads to SSRF or the vulnerability of privilege
escalation. This CWE has been put under the category of the issues as CWE-918. This can have the
impact of integrity, confidentiality and availability. In this study, there is a description of various
complex issues with technical and business problems with the evaluation of CVE-2019-17669 and
solutions to the exploit. Apart from that future importance and capabilities of CVE-2019-17669 are
assessed here.

UNDERSTANDING WORDPRESS CVE-2019-17669
2
Table of Contents
Introduction:..........................................................................................................................................3
Description of Wordpress:.....................................................................................................................3
Demonstrating of CVE-2019-17669:....................................................................................................5
Assessment of the likely future effectiveness and importance of CVE-2019-17669:...........................8
Conclusion:............................................................................................................................................8
References:..........................................................................................................................................10

UNDERSTANDING WORDPRESS CVE-2019-17669
3
Introduction:
A critical vulnerability is seen in WordPress till 5.2.3. The affected thing was an unknown
functionality related to a component URL Handler. Further, the manipulation with unknown input
gives rise to the SSRF or privilege escalation vulnerability. The CWE has been categorization the
problem as CWE-918. It is going to have an effect on availability, integrity and confidentiality. This
weakness has been shown during 10/17/2019. The vulnerability has been traded as the CVE-109-
1669 FROM 10/1/2019. This exportability has been revealed to be simple. An attack can be
launched here remotely. Moreover, exploitation has never needed any type of authentication. Again,
the technical details have been unknown and the exploit has never been available. Here, the structure
of that vulnerably has been defining the probable price range of 0 to 5k USD dollars at that time.
This up-gradation to version 5.2.4 eradicates the vulnerability. The following report describes the
different critical problems along with the business or technical issues for CVE-2019-17669.
Moreover, its future potentials are also discussed in this evaluation.
Description of Wordpress:
The WordPress is a popular free content management system. This is utilized for creating
and maintaining different websites. It is easy to use and has distinct features of blogging. This helps
become the most popular tool for blogging over the Internet. It delivers the web-based user interface
to update, publish and design sites (Rodas-Silva et al. 2019). Rather than writing in HTML, one
might easily opt for various templates or theme over the websites consisting of the designs liked by
users. Moreover, one can change the layout and create any custom bar for navigation. As the layout
of the site is finished, one can utilize the online interface of WordPress for generating individual
pages. Every page comprises of formatted texts, images, links and additional media (Messenlehner
and Coleman 2019). One is able to publish the webpages completed or updates of blogs through a