HTTP: WordPress load-scripts.php Denial Of Service
This signature detects attempt to exploit denial of service vulnerability which is present in WordPress. A remote attacker could exploit this vulnerability by sending crafted requests to a vulnerable server. Successful exploitation would exhaust the resources of the target server, possibly resulting in denial-of-service conditions.
Extended Description
In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (from wp-includes/script-loader.php) to construct a series of requests to load every file many times.
Affected Products
Wordpress wordpress
Short Name
HTTP:WORDPRESS-LS-DOS
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2018-6389 Denial Of Service WordPress load-scripts.php
Release Date
02/20/2018
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3337
False Positive
Unknown
Vendors
Wordpress
CVSS Score
5.0