PT-2023-4919 · WordPress · Media Library Assistant

Montel + 1 · Publicado 2023-08-30 · Atualizado 2025-09-29 · CVE-2023-4634

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Media Library Assistant plugin for WordPress versions up to, and including, 3.09

Description The issue is related to insufficient controls on file paths being supplied to the mla stream file parameter from the ~/includes/mla-stream-image.php file, where images are processed via Imagick(). This makes it possible for unauthenticated attackers to supply files via FTP that will make directory lists, local file inclusion, and remote code execution possible. The estimated number of potentially affected devices worldwide is around 70,000 WordPress sites.

Recommendations For Media Library Assistant plugin for WordPress versions up to, and including, 3.09, update to version 3.10 or newer as soon as possible to resolve the issue. As a temporary workaround, consider restricting access to the mla stream file parameter and the ~/includes/mla-stream-image.php file to minimize the risk of exploitation. Additionally, avoid using the mla stream file parameter in the affected API endpoint until the issue is resolved.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-73

Identificadores relacionados

BDU:2023-05428

CVE-2023-4634

Produtos afetados

Media Library Assistant

Referências · 50

• 🔥 https://github.com/Patrowl/CVE-2023-4634 · Exploit
• 🔥 https://patrowl.io/blog-wordpress-media-library-rce-cve-2023-4634 · Exploit
• 🔥 https://exploit-db.com/exploits/51737 · Exploit
• https://wordfence.com/threat-intel/vulnerabilities/id/05c68377-feb6-442d-a3a0-1fbc246c7cbf?source=cve · Nota
• https://twitter.com/_r_netsec/status/1698976281579356294 · Publicação no Twitter
• https://t.me/rnetsec/19241 · Publicação no Telegram
• https://twitter.com/Pepito_oh/status/1698973418064838690 · Publicação no Twitter
• https://twitter.com/the_yellow_fall/status/1699260621705847233 · Publicação no Twitter
• https://t.me/cvenotify/57929 · Publicação no Telegram
• https://twitter.com/axcheron/status/1699010752315592971 · Publicação no Twitter
• https://wordpress.org/plugins/media-library-assistant · Nota
• https://t.me/cibsecurity/69963 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2023-05428 · Nota de Segurança
• https://twitter.com/zoomeye_team/status/1699725518554489085 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-4634 · Aviso do Fabricante