[wp-trac] [WordPress Trac] #65048: wp_ajax_fetch_list(): Sanitize $_GET input before nonce construction

[WordPress Trac]

#65048: wp_ajax_fetch_list(): Sanitize $_GET input before nonce construction
----------------------------+-------------------------------------
 Reporter:  rajeshcp        |      Owner:  rajeshcp
     Type:  defect (bug)    |     Status:  assigned
 Priority:  normal          |  Milestone:  Awaiting Review
Component:  Administration  |    Version:  trunk
 Severity:  critical        |   Keywords:  has-patch needs-testing
  Focuses:                  |
----------------------------+-------------------------------------
 In wp_ajax_fetch_list() (wp-admin/includes/ajax-actions.php), raw $_GET
 data is read without an existence check or sanitization before being used
 to construct the nonce action string and passed to _get_list_table().

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/65048>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform