{"id":1086,"date":"2017-11-08T14:57:38","date_gmt":"2017-11-08T19:57:38","guid":{"rendered":"https:\/\/cert.pa\/?p=1086"},"modified":"2017-11-08T14:57:38","modified_gmt":"2017-11-08T19:57:38","slug":"csirt-panama-aviso-2017-11-08-wordpress-libera-version-de-seguridad-4-8-3","status":"publish","type":"post","link":"https:\/\/cert.pa\/?p=1086","title":{"rendered":"CSIRT Panam\u00e1 Aviso 2017-11-08 WordPress libera versi\u00f3n de seguridad 4.8.3"},"content":{"rendered":"<p>CSIRT Panam\u00e1 Aviso 2017-11-08 WordPress libera versi\u00f3n de seguridad 4.8.3<br \/>\nGravedad: Alta<br \/>\nFecha de publicaci\u00f3n: Noviembre 08, 2017<br \/>\nFecha de modificaci\u00f3n: Noviembre 08, 2017<br \/>\n\u00daltima revisi\u00f3n: Revisi\u00f3n A.<\/p>\n<p>Sistemas Afectados:<br \/>\nWordpress 4.8.2 y anteriores.<\/p>\n<p>I. Descripci\u00f3n<br \/>\nWordPress 4.8.3 ya est\u00e1 disponible. Esta es una versi\u00f3n de seguridad para todas las versiones anteriores.<\/p>\n<p>II. Impacto:<br \/>\nLas versiones de WordPress 4.8.2 y anteriores se ven afectadas por la vulnerabilidad de la injecci\u00f3n de SQL por $wpdb-&gt;prepare() , que permite la creaci\u00f3n de consultas no seguras e inesperadas. Que puede permitir a un atacante comprometer la aplicaci\u00f3n hacia la base de datos.<\/p>\n<p>III. Referencia a soluciones, herramientas e informaci\u00f3n<br \/>\nSe recomienda actualizar hacia la versi\u00f3n 4.8.3.<br \/>\n\u2022 Visite el Centro de seguridad para obtener m\u00e1s informaci\u00f3n:<\/p>\n<blockquote class=\"wp-embedded-content\" data-secret=\"sEPoPAktLl\"><p><a href=\"https:\/\/wordpress.org\/news\/2017\/10\/wordpress-4-8-3-security-release\/\">WordPress 4.8.3 Security Release<\/a><\/p><\/blockquote>\n<p><iframe loading=\"lazy\" class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; clip: rect(1px, 1px, 1px, 1px);\" title=\"&#8220;WordPress 4.8.3 Security Release&#8221; &#8212; WordPress News\" src=\"https:\/\/wordpress.org\/news\/2017\/10\/wordpress-4-8-3-security-release\/embed\/#?secret=5PKqyYFALO#?secret=sEPoPAktLl\" data-secret=\"sEPoPAktLl\" width=\"500\" height=\"282\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe><br \/>\n\u2022 Informaci\u00f3n relacionada a la vulnerabilidad CVE-2017-16510<br \/>\nhttps:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2017-16510<\/p>\n<p>IV. Informaci\u00f3n de contacto<br \/>\nCSIRT PANAMA<br \/>\nComputer Security Incident Response Team Autoridad Nacional para la<br \/>\nInnovacion Gubernamental<br \/>\nE-Mail: info@cert.pa<br \/>\nPhone: +507 520-CERT (2378)<br \/>\nWeb: https:\/\/cert.pa<br \/>\nTwitter: @CSIRTPanama<br \/>\nFacebook: http:\/\/www.facebook.com\/CSIRTPanama<br \/>\nKey ID: 16F2B124<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CSIRT Panam\u00e1 Aviso 2017-11-08 WordPress libera versi\u00f3n de seguridad 4.8.3 Gravedad: Alta Fecha de publicaci\u00f3n: Noviembre 08, 2017 Fecha de modificaci\u00f3n: Noviembre 08, 2017 \u00daltima revisi\u00f3n: Revisi\u00f3n A. Sistemas Afectados: Wordpress 4.8.2 y anteriores. I&#8230;.<\/p>\n","protected":false},"author":4,"featured_media":846,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[4],"tags":[],"class_list":["post-1086","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-avisos-de-seguridad"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/1086","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1086"}],"version-history":[{"count":1,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/1086\/revisions"}],"predecessor-version":[{"id":1087,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/1086\/revisions\/1087"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/media\/846"}],"wp:attachment":[{"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1086"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1086"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1086"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}