CVE-2024-38909

creationtimestamp| type| source ---|---|--- 2024-07-30 17:24:56+00:00| seen| https://t.me/cvedetector/2036...

CVE-2024-38909

Studio 42 elFinder 2.1.64 is vulnerable to Incorrect Access Control. Copying files with an unauthorized extension between server directories allows an arbitrary attacker to expose secrets, perform RCE, etc...