CodeIgniter4's ImageMagick Handler has Command Injection Vulnerability

链接： https://github.com/advisories/GHSA-9952-gv64-x94c

仓库 Star： 5663

CVSS 评分： 9.8

参考链接：

描述：

Impact

This vulnerability affects applications that:

  • Use the ImageMagick handler for image processing (imagick as the image library)
  • AND either:
    • Allow file uploads with user-controlled filenames and process uploaded images using the resize() method
    • OR use the text() method with user-controlled text content or options

An attacker can:

  • Upload a file with a malicious filename containing shell metacharacters that get executed when the image is processed
  • OR provide malicious text content or options that get executed when adding text to images

Patches

Upgrade to v4.6.2 or later.

Workarounds

  • Switch to the GD image handler (gd, the default handler), which is not affected by either vulnerability
  • For file upload scenarios: Instead of using user-provided filenames, generate random names to eliminate the attack vector with getRandomName() when using the move() method, or use the store() method, which automatically generates safe filenames
  • For text operations: If you must use ImageMagick with user-controlled text, sanitize the input to only allow safe characters: preg_replace('/[^a-zA-Z0-9\s.,!?-]/', '', $text) and validate/restrict text options

References

安全公告
#Github Advisory
CodeIgniter4's ImageMagick Handler has Command Injection Vulnerability
http://example.com/2025/07/28/github_4224934059/
作者
lianccc
发布于
2025年7月28日
许可协议