~ / search / GHSA-6p96-vfrc-fv32

GHSA-6p96-vfrc-fv32

RCE in Studio-42 elFinder on Windows before 2.1.61

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-27115

Packages

EcosystemPackageAffectedFixed in
Packagist studio-42/elfinder < 2.1.61 2.1.61

Details

As written in the advisory (Markdown source, shown as plain text).

In Studio-42 elFinder 2.1.60, there is a vulnerability that causes remote code execution through file name bypass for file upload.

References

External links from the advisory. They lead to third-party sites.