[wp-trac] [WordPress Trac] #49548: PHP Uncaught errors in ID3/module.audio.ace.php

[WordPress Trac]

#49548: PHP Uncaught errors in ID3/module.audio.ace.php
--------------------------+-----------------------------
 Reporter:  dxladner      |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Media         |    Version:  5.3.2
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 So this is the first time reporting a possible bug or security issue. I
 use the Search box to search for this possible issue and return nothing.
 So I am entering what information I have here:

 So I am getting this error: Uncaught Error: Class 'getid3_handler' not
 found in /wp-includes/ID3/module.audio.ac3.php. After some reach, all I
 can find is it has to do with parsing audio files which we have none on
 our website.

 So searching all of our logs, I found this in our nginx log file:
 nginx-access.log:7732:104.198.178.229 - - [28/Feb/2020:07:20:33 +0000]
 "GET //wp-includes/ID3/module.audio.ac3.php HTTP/1.1" 301 189 "-" "python-
 requests/2.23.0" 0.000 "20.188.45.25"
 nginx-access.log:7733:35.225.194.20 - - [28/Feb/2020:07:20:33 +0000]  "GET
 //wp-includes/ID3/module.audio.ac3.php HTTP/1.1" 500 5 "-" "python-
 requests/2.23.0" 0.166 "20.188.45.25, 20.188.45.25"

 so my thought is web-bot keeps trying to access this file for some reason.
 I have blocked this IP address.
 But I did not know if this could be a possible bug or security issue, as
 this IP which is on the IP Abuse list:
 https://www.abuseipdb.com/check/20.188.45.25  keeps trying to access this
 file.

 Again if this is a bug, it might be causing issues with other sites using
 audio files OR security issue: as why would that IP address specifically
 target that specific file?

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/49548>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform