CVE-2026-81889: Server-Side Request Forgery (SSRF)

elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, elFinder URL uploads in php/elFinder.class.php can bypass server-side request forgery protections when PHP cURL is unavailable because validateaddress validates $info'ip', but getremotecontent...

CVE-2019-6257: Server-Side Request Forgery (SSRF)

A Server Side Request Forgery SSRF vulnerability in elFinder before 2.1.46 could allow a malicious user to access the content of internal network resources. This occurs in getremotecontents in php/elFinder.class.php...

CVE-2019-5884: Exposure of Sensitive Information to an Unauthorized Actor

php/elFinder.class.php in elFinder before 2.1.45 leaks information if PHP's curl extension is enabled and safemode or openbasedir is not set...

Directory Traversal

studio-42/elfinder is vulnerable to directory traversals. The application does not properly validate the file parameter in the zipdl function of elFinder.class.php, allowing a malicious user to conduct a directory traversals attack, and may cause file deletion. This vulnerability exists due to an...

Directory Traversal

studio-42/elfinder is vulnerable to directory traversals. The application does not validate the file parameter of the zipdl function in elFinder.class.php, allowing a malicious user to cause a directory traversal attack and may cause file deletion...

CVE-2018-9110

Studio 42 elFinder before 2.1.37 has a directory traversal vulnerability in elFinder.class.php with the zipdl function that can allow a remote attacker to download files accessible by the web server process and delete files owned by the account running the web server process. NOTE: this issue...

CVE-2018-9110: Improper Limitation of a Pathname to a Restricted Directory

Studio 42 elFinder before 2.1.37 has a directory traversal vulnerability in elFinder.class.php with the zipdl function that can allow a remote attacker to download files accessible by the web server process and delete files owned by the account running the web server process. NOTE: this issue...

CVE-2018-9109: Improper Limitation of a Pathname to a Restricted Directory

Studio 42 elFinder before 2.1.36 has a directory traversal vulnerability in elFinder.class.php with the zipdl function that can allow a remote attacker to download files accessible by the web server process and delete files owned by the account running the web server process...

PT-2018-18858

Name of the Vulnerable Software and Affected Versions Studio 42 elFinder versions prior to 2.1.36 Studio 42 elFinder version 2.1.36 Description The issue is a directory traversal vulnerability in elFinder.class.php with the zipdl function. This vulnerability can allow a remote attacker to downloa...