Make WordPress Core

Opened 5 years ago

Closed 5 years ago

Last modified 5 years ago

#49548 closed defect (bug) (duplicate)

PHP Uncaught errors in ID3/module.audio.ace.php

Reported by: dxladner's profile dxladner Owned by:
Milestone: Priority: normal
Severity: normal Version:
Component: Media Keywords:
Focuses: Cc:

Description

So this is the first time reporting a possible bug or security issue. I use the Search box to search for this possible issue and return nothing. So I am entering what information I have here:

So I am getting this error: Uncaught Error: Class 'getid3_handler' not found in /wp-includes/ID3/module.audio.ac3.php. After some reach, all I can find is it has to do with parsing audio files which we have none on our website.

So searching all of our logs, I found this in our nginx log file:
nginx-access.log:7732:104.198.178.229 - - [28/Feb/2020:07:20:33 +0000] "GET wp-includes/ID3/module.audio.ac3.php HTTP/1.1" 301 189 "-" "python-requests/2.23.0" 0.000 "20.188.45.25"
nginx-access.log:7733:35.225.194.20 - - [28/Feb/2020:07:20:33 +0000] "GET
wp-includes/ID3/module.audio.ac3.php HTTP/1.1" 500 5 "-" "python-requests/2.23.0" 0.166 "20.188.45.25, 20.188.45.25"

so my thought is web-bot keeps trying to access this file for some reason. I have blocked this IP address.
But I did not know if this could be a possible bug or security issue, as this IP which is on the IP Abuse list: https://www.abuseipdb.com/check/20.188.45.25 keeps trying to access this file.

Again if this is a bug, it might be causing issues with other sites using audio files OR security issue: as why would that IP address specifically target that specific file?

Change History (2)

#1 @ocean90
5 years ago

  • Milestone Awaiting Review deleted
  • Resolution set to duplicate
  • Status changed from new to closed
  • Version 5.3.2 deleted

Hello @dxladner, welcome to WordPress Trac!

Thanks for the report, we’re already tracking this issue in #49499.

#2 @dxladner
5 years ago

Thanks Dominik,

I guess my search term was too specific and did not return that Ticket number thus me placing a duplicate.

Thanks for the quick response.

Thanks,

Darren

Note: See TracTickets for help on using tickets.