16 matches found
CVE-2019-9194
Versions of elFinder prior to 2.1.48 are vulnerable to a command injection flaw in the PHP connector component. The vulnerability occurs because the application fails to sanitize filenames during image operations; specifically, when a user requests an image rotation on a JPEG file, the filename i...
CVE-2021-32682
elFinder 2.1.58 is affected by multiple remote code execution vulnerabilities that could allow an attacker to execute arbitrary code and commands on the server hosting the PHP connector, even with minimal configuration. The issues were patched in 2.1.59; a mitigation is to ensure the connector is...
CVE-2021-43421
Summary: CVE-2021-43421 affects Studio-42 elFinder versions 2.0.4 through 2.1.59, where an unauthenticated file upload via connector.minimal.php enables arbitrary file uploads and PHP code execution on the server. Details from connected docs: multiple sources describe unauthenticated arbitrary fi...
CVE-2022-26960
CVE-2022-26960 affects elFinder
CVE-2021-23394
The studio-42/elfinder web file manager before version 2.1.58 is vulnerable to Remote Code Execution (RCE) . The root cause is an insufficient upload filter that fails to disallow the upload of .phar files. If the underlying web server (such as certain Apache or Nginx configurations) parses these...
CVE-2023-52044
Studio-42 eLfinder versions 2.1.62 and prior are vulnerable to Remote Code Execution (RCE) because the application lacks restrictions on uploading files with the .php8 extension. An attacker can exploit this by uploading a malicious .php8 file to execute arbitrary code on the server. To remediate...
CVE-2022-27115
Studio-42 elFinder 2.1.60 is vulnerable to remote code execution via a filename-based bypass during file uploads. Root cause: filename bypass allows crafted uploads to execute on the server. Affected: elFinder 2.1.60 (Windows-specific advisory notes). Impact: remote code execution with high/criti...
CVE-2024-38909
Studio 42 elFinder version 2.1.64 is vulnerable to Incorrect Access Control because it allows the unauthorized copying of files with restricted extensions between server directories. An arbitrary attacker can exploit this flaw to expose secrets and potentially perform remote code execution (RCE) ...
CVE-2021-45919
Studio 42 elFinder versions up to 2.1.31 are affected by a cross-site scripting (XSS) vulnerability involving SVG data handling. The vulnerability stems from insecure handling of SVG document data, enabling client-side code execution. Affected product is elFinder (Studio 42), with the issue docum...
CVE-2023-52045
The studio-42/elfinder web file manager (version 2.1.62 ) is vulnerable to persistent Cross-site Scripting (XSS) due to a filename restriction bypass . An attacker can exploit this by uploading a specially crafted file with a malicious filename, such as test.html.aaa, which allows the injection o...
CVE-2019-5884
The CVE-2019-5884 entry concerns information disclosure in the elFinder project. It affects elFinder versions up to and including 2.1.44 (before 2.1.45), where PHP’s curl extension, combined with unsafe PHP configurations (safe_mode or open_basedir not set), can leak information. Root cause is ti...
CVE-2023-35840
CVE-2023-35840 affects elFinder before 2.1.62 due to a path traversal weakness in the PHP LocalVolumeDriver connector (joinPath in elFinderVolumeLocalFileSystem.class.php). The root cause is incomplete validation of the target parameter, allowing traversal beyond web root. OpenVAS details indicat...
CVE-2019-6257
The CVE-2019-6257 issue affects elFinder prior to version 2.1.46, caused by a vulnerability in get_remote_contents() within php/elFinder.class.php that permits server-side request forgery (SSRF) to access internal network resources. Public documents from NVD, Red Hat, OSV, and security advisories...
CVE-2018-9110
Studio 42 elFinder is vulnerable before version 2.1.37 due to a directory traversal flaw in elFinder.class.php zipdl() that lets an attacker download files accessible to the web server and delete files owned by the server process. The issue stems from an incomplete fix for CVE-2018-9109. Public r...
CVE-2018-9109
Studio 42 elFinder (PHP Web file manager) prior to version 2.1.36 is affected by a directory traversal vulnerability in elFinder.class.php, zipdl() function. The flaw allows a remote attacker to download files accessible by the web server process and to delete files owned by the account running t...