[wp-trac] [WordPress Trac] #21113: Previous/Next page links maintain all GET variables

WordPress Trac noreply at wordpress.org
Fri Apr 5 12:36:19 UTC 2013


#21113: Previous/Next page links maintain all GET variables
-------------------------------------------+------------------------------
 Reporter:  kirrus                         |       Owner:
     Type:  enhancement                    |      Status:  new
 Priority:  normal                         |   Milestone:  Awaiting Review
Component:  General                        |     Version:  3.4
 Severity:  normal                         |  Resolution:
 Keywords:  needs-patch 2nd-opinion close  |
-------------------------------------------+------------------------------

Comment (by kirrus):

 I should add, a clever attacker could also use this particular bug to fill
 a reverse proxy caching system's store with many many thousands of copies
 of the same data, hurting the cache's ability to take load off the backend
 system. It could easily be used to make a simple HTTP requesting DOS/DDoS
 more painful / harder to handle.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/21113#comment:10>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list