elFinder 2.1.58 - Remote Code Execution

🗓️ 19 Oct 2026 02:08:20Reported by ProjectDiscoveryType

nuclei🔗 github.com👁 475 Views

elFinder 2.1.58 - Remote Code Execution CVE-2021-32682 critical vulnerability impact arbitrary code execution on the serve

Reporter	Title	Published	Views	Family All 29
zdt	elFinder Archive Command Injection Exploit	15 Sep 202100:00	–	zdt
attackerkb	CVE-2021-32682	14 Jun 202117:15	–	attackerkb
BDU FSTEC	elFinder Code Execution	29 Jun 202100:00	–	bdu_fstec
Circl	CVE-2021-32682	14 Jun 202120:37	–	circl
CNNVD	elFinder code issue vulnerabilities	14 Jun 202100:00	–	cnnvd
CNVD	elFinder code issue vulnerability	17 Jun 202100:00	–	cnvd
Check Point Advisories	ElFinder File Manager Command Injection (CVE-2021-32682)	30 Dec 202100:00	–	checkpoint_advisories
CVE	CVE-2021-32682	14 Jun 202116:45	–	cve
Cvelist	CVE-2021-32682 Multiple vulnerabilities leading to RCE	14 Jun 202116:45	–	cvelist
Github Security Blog	elFinder before 2.1.59 contains multiple vulnerabilities leading to RCE	16 Jun 202117:04	–	github

Source	Link
smaranchand	www.smaranchand.com.np/2022/01/organization-vendor-application-security/
blog	www.blog.sonarsource.com/elfinder-case-study-of-web-file-manager-vulnerabilities
github	www.github.com/Studio-42/elFinder/security/advisories/GHSA-wph3-44rj-92pr
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-32682
github	www.github.com/Studio-42/elFinder/commit/a106c350b7dfe666a81d6b576816db9fe0899b17

id: CVE-2021-32682

info:
  name: elFinder 2.1.58 - Remote Code Execution
  author: smaranchand
  severity: critical
  description: elFinder 2.1.58 is impacted by multiple remote code execution vulnerabilities that could allow an attacker to execute arbitrary code and commands on the server hosting the elFinder PHP connector, even with minimal configuration.
  impact: |
    Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system.
  remediation: Update to elFinder 2.1.59 or later. As a workaround, ensure the connector is not exposed without authentication.
  reference:
    - https://smaranchand.com.np/2022/01/organization-vendor-application-security/
    - https://blog.sonarsource.com/elfinder-case-study-of-web-file-manager-vulnerabilities
    - https://github.com/Studio-42/elFinder/security/advisories/GHSA-wph3-44rj-92pr
    - https://nvd.nist.gov/vuln/detail/CVE-2021-32682
    - https://github.com/Studio-42/elFinder/commit/a106c350b7dfe666a81d6b576816db9fe0899b17
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    cvss-score: 9.8
    cve-id: CVE-2021-32682
    cwe-id: CWE-22
    epss-score: 0.69934
    epss-percentile: 0.9937
    cpe: cpe:2.3:a:std42:elfinder:*:*:*:*:*:*:*:*
  metadata:
    max-request: 9
    vendor: std42
    product: elfinder
    github: https://github.com/Studio-42/elFinder
  tags: cve2021,cve,elfinder,misconfig,rce,oss,std42,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/admin/elfinder/elfinder-cke.html"
      - "{{BaseURL}}/assets/backend/elfinder/elfinder-cke.html"
      - "{{BaseURL}}/assets/elFinder-2.1.9/elfinder.html"
      - "{{BaseURL}}/assets/elFinder/elfinder.html"
      - "{{BaseURL}}/backend/elfinder/elfinder-cke.html"
      - "{{BaseURL}}/elfinder/elfinder-cke.html"
      - "{{BaseURL}}/uploads/assets/backend/elfinder/elfinder-cke.html"
      - "{{BaseURL}}/uploads/assets/backend/elfinder/elfinder.html"
      - "{{BaseURL}}/uploads/elfinder/elfinder-cke.html"

    stop-at-first-match: true

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "elfinder"
          - "php/connector"
        condition: and

      - type: status
        status:
          - 200
# digest: 490a004630440220099c26db39cdbd0e5514c5f3e10ad96055a0b28d8dbb16ec5a39f94b833b9fcb02204e4c322fd27c5349687729b3de29eb19de819d52a1535ca874802d37b8b9fb86:922c64590222798bb761d5b6d8e72950

04 Feb 2026 07:00Current

9.2Critical risk

Vulners AI Score9.2

CVSS 27.5

CVSS 3.19.8

EPSS0.69934