CVE-2016-10514

Name: CVE-2016-10514
Creator: NVD / NIST
Published: 2017-10-10T20:29:00.273+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.22%

Last modified Jun 17, 2026

CVE-2016-10514 is a vulnerability of currently unknown severity. url_check_format in include/functions.inc.php in Piwigo before 2.8.3 allows remote attackers to bypass intended access restrictions via a URL that contains a " character, or a URL beginning with a substring other than the http:// or https:// substring.. EPSS estimates a 1.22% chance of exploitation in the next 30 days.

Description

url_check_format in include/functions.inc.php in Piwigo before 2.8.3 allows remote attackers to bypass intended access restrictions via a URL that contains a " character, or a URL beginning with a substring other than the http:// or https:// substring.

Metrics

EPSS Probability

1.22%

64.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-284

Affected Software

Vendor	Product	Versions
Piwigo	Piwigo	<= 2.8.2

References

http://piwigo.org/releases/2.8.3Patch, Release Notes, Vendor Advisory
https://github.com/Piwigo/Piwigo/commit/b3157cbfd859c914911b114d4edbba4654758b57Issue Tracking, Patch, Third Party Advisory
https://github.com/Piwigo/Piwigo/issues/547Issue Tracking, Patch, Third Party Advisory
http://piwigo.org/releases/2.8.3Patch, Release Notes, Vendor Advisory
https://github.com/Piwigo/Piwigo/commit/b3157cbfd859c914911b114d4edbba4654758b57Issue Tracking, Patch, Third Party Advisory
https://github.com/Piwigo/Piwigo/issues/547Issue Tracking, Patch, Third Party Advisory

Timeline

Published: Oct 10, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2016-10514?

How severe is CVE-2016-10514?

Severity scoring for CVE-2016-10514 is pending analysis. The EPSS model estimates a 1.22% probability of exploitation in the next 30 days.

How do I fix CVE-2016-10514?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2016-10514?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST