漏洞描述
A vulnerability in the Wordpress Media-Library-Assistant plugins in version < 3.09 is vulnerable to a local file inclusion which leading to RCE on default Imagegick installation/configuration.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
patrowl.iohttps://patrowl.io/blog-wordpress-media-library-rce-cve-2023-4634/↗fr.wordpress.orghttps://fr.wordpress.org/plugins/media-library-assistant/advanced/↗cve.reporthttps://cve.report/CVE-2023-4634↗packetstormsecurity.comhttps://packetstormsecurity.com/files/174508/wpmla309-lfiexec.tgz↗plugins.trac.wordpress.orghttps://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2955933%40media-library-assistant&new=2955933%40media-library-assistant&sfp_email=&sfph_mail=#file4↗