| 제목 | Orbitale ImageMagickPHP 3.3.5 Orbitale ImageMagickPHP Command.php font OS Command Injection |
|---|
| 설명 | A vulnerability has been found in Orbitale ImageMagickPHP 3.3.5, classified as critical. This vulnerability affects the function font of the file src/Command.php. The manipulation of the argument fontFile leads to os command injection. The function inserts the argument directly into the assembled command string without escaping when the optional checkFontFileExists parameter is left at its default value of false, and the resulting string is executed via Symfony Process::fromShellCommandline(), which interprets shell metacharacters. The attack requires that a consuming application pass externally-influenced input to this parameter, a plausible and undocumented-as-unsafe usage given the method's own signature. Upgrading is not possible as no patched version exists at time of disclosure. NOTE: The vendor was contacted about this disclosure but has not yet responded. |
|---|
| 원천 | ⚠️ https://gist.github.com/0xSebin/834b7ab2e72d68be51d204193f427a20 |
|---|
| 사용자 | 0xSebin (UID 35195) |
|---|
| 제출 | 2026. 09. 17. PM 09:17 (1 월 ago) |
|---|
| 모더레이션 | 2026. 10. 19. PM 04:07 (1 month later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 422347 [orbitale imagemagick-php 까지 3.3.5 src/Command.php Command::font fontFile 권한 상승] |
|---|
| 포인트들 | 20 |
|---|