WordPress近日发现一个CVSS评分达9.2/10的高危漏洞，影响自2016年以来发布的所有版本，包括4.7.0至7.1.1的完整版本线1。该漏洞由Robert Ressl发现，属于未认证路径遍历型安全缺陷，允许攻击者在页面模板解析中包含任意本地PHP文件，在特定条件下可导致远程代码执行1。
漏洞的触发需要满足多个条件：活跃主题必须包含以"page-"开头的顶级目录（包括Twenty Twelve、Twenty Fourteen、Neve、Hestia、Sydney等主题受影响1），服务器上存在可读的PHP文件，且register_argc_argv配置选项被设置为On1。WordPress已在7.1.2版本推出修复，并向后移植至7.0.6、6.9.9及其他后续版本分支1。
A critical security vulnerability has been discovered in WordPress affecting every version released since 2016. 1 The flaw, which carries a CVSS severity score of 9.2 out of 10, impacts WordPress versions 4.7.0 through 7.1.1. 1 Unauthenticated attackers can exploit a path traversal vulnerability to include arbitrary local PHP files during page template processing, potentially leading to remote code execution under specific conditions. 1
The vulnerability requires certain conditions to be triggered, including an active theme containing a top-level directory beginning with "page-" (such as Twenty Twelve, Twenty Fourteen, Neve, Hestia, or Sydney themes), the presence of readable PHP files on the server, and the register_argc_argv setting configured to "On." 1 WordPress 7.1.2 has been released to address the issue, with security patches also backported to all versions from 4.7 onwards, including 7.0.6 and 6.9.9. 1 The vulnerability was discovered by Robert Ressl. 1
评论
还没有评论，欢迎留下第一条。