CVE-2011-0701

Priority
Low
Description
wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5
allows remote authenticated users to read (1) draft posts or (2) private
posts via a modified attachment_id parameter.
References
Package
Upstream:released (3.0.5)
Ubuntu 12.04 LTS (Precise Pangolin):not-affected (3.0.5+dfsg-1ubuntu1)
Ubuntu 14.04 LTS (Trusty Tahr):not-affected (3.0.5+dfsg-1ubuntu1)
More Information

Valid XHTML 1.0 Strict

Updated: 2015-07-29 20:39:23 UTC (commit 9756)