CVE-2023-4634: Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution
The Media Library Assistant plugin for WordPress is vulnerable to Local File Inclusion and Remote Code Execution in versions up to, and including, 3.09. This is due to insufficient controls on file paths being supplied to the 'mlastreamfile' parameter from the ~/includes/mla-stream-image.php file, where images are processed via Imagick(). This makes it possible for unauthenticated attackers to supply files via FTP that will make directory lists, local file inclusion, and remote code execution possible.
Credit
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability with CVE-2023-4634?
The vulnerability with CVE-2023-4634 is a combination of Local File Inclusion (LFI) and Remote Code Execution (RCE) in the Media Library Assistant plugin for WordPress.
What is the severity of CVE-2023-4634?
The severity of CVE-2023-4634 is critical with a severity value of 9.8.
How does CVE-2023-4634 impact the Media Library Assistant plugin for WordPress?
CVE-2023-4634 allows attackers to include local files and execute malicious code in versions of the Media Library Assistant plugin up to and including 3.09.
Is there a fix available for CVE-2023-4634?
Yes, users should update to version 3.10 of the Media Library Assistant plugin to mitigate the vulnerability.
Where can I find more information about CVE-2023-4634?
You can find more information about CVE-2023-4634 on the following websites: [1] GitHub: https://github.com/Patrowl/CVE-2023-4634/, [2] Packet Storm Security: https://packetstormsecurity.com/files/174508/wpmla309-lfiexec.tgz, [3] Patrowl.io: https://patrowl.io/blog-wordpress-media-library-rce-cve-2023-4634/