3 matches found
CVE-2022-26960
connector.minimal.php in std42 elFinder through 2.1.60 is affected by path traversal. This allows unauthenticated remote attackers to read, write, and browse files outside the configured document root. This is due to improper handling of absolute file paths...
9.1CVSS0.50993EPSS
SaveExploits1References3
CVE-2022-26960
CVE-2022-26960 affects elFinder
9.1CVSS9.1AI score0.50993EPSS
SaveExploits1References3Affected Software1
CVE-2022-26960: Improper Limitation of a Pathname to a Restricted Directory
connector.minimal.php in std42 elFinder through 2.1.60 is affected by path traversal. This allows unauthenticated remote attackers to read, write, and browse files outside the configured document root. This is due to improper handling of absolute file paths...
9.1CVSS8.2AI score0.50993EPSS
SaveExploits1References2
20