[wp-trac] [WordPress Trac] #53329: Empty Authorization header brings down site in wp-includes/rest-api/endpoints/class-wp-rest-attachments-controller.php

[WordPress Trac]

#53329: Empty Authorization header brings down site in wp-includes/rest-
api/endpoints/class-wp-rest-attachments-controller.php
--------------------------+----------------------
 Reporter:  rosandiford   |       Owner:  (none)
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:
Component:  REST API      |     Version:  5.7.2
 Severity:  normal        |  Resolution:  invalid
 Keywords:                |     Focuses:
--------------------------+----------------------
Changes (by TimothyBlynJacobs):

 * status:  new => closed
 * resolution:   => invalid
 * milestone:  Awaiting Review =>


Comment:

 Thanks for the details @rosandiford. That line of code does not exist in
 WordPress Core: https://github.com/WordPress/wordpress-
 develop/blob/master/src/wp-includes/rest-api/endpoints/class-wp-rest-
 attachments-controller.php

 Based on that code, it looks to me like your site has been hacked. I would
 recommend reading thru https://wordpress.org/support/article/faq-my-site-
 was-hacked/

 Since this isn't an issue with the Core WordPress software, I'm going to
 close out this ticket.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/53329#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform