CVE-2021-23394

creationtimestamp| type| source ---|---|--- 2021-06-13 14:22:25+00:00| seen| https://t.me/cibsecurity/25429 2021-08-23 12:07:01+00:00| seen| https://t.me/CyberSecurityTechnologies/4133 2025-11-30 05:19:32+00:00| confirmed|...

CVE-2021-23394

The package studio-42/elfinder before 2.1.58 are vulnerable to Remote Code Execution RCE via execution of PHP code in a .phar file. NOTE: This only applies if the server parses .phar files as PHP...

CVE-2021-23394

The studio-42/elfinder web file manager before version 2.1.58 is vulnerable to Remote Code Execution (RCE) . The root cause is an insufficient upload filter that fails to disallow the upload of .phar files. If the underlying web server (such as certain Apache or Nginx configurations) parses these...

CVE-2021-23394 Remote Code Execution (RCE)

The package studio-42/elfinder before 2.1.58 are vulnerable to Remote Code Execution RCE via execution of PHP code in a .phar file. NOTE: This only applies if the server parses .phar files as PHP...

CVE-2021-23394

The package studio-42/elfinder before 2.1.58 are vulnerable to Remote Code Execution RCE via execution of PHP code in a .phar file. NOTE: This only applies if the server parses .phar files as PHP...