~ / search / GHSA-jcgc-vxqg-85xx

GHSA-jcgc-vxqg-85xx

Sensitive Data Exposure in elFinder

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-5884

Packages

EcosystemPackageAffectedFixed in
Packagist studio-42/elfinder < 2.1.45 2.1.45

Details

As written in the advisory (Markdown source, shown as plain text).

`php/elFinder.class.php` in elFinder before 2.1.45 leaks information if PHP's curl extension is enabled and `safe_mode` or `open_basedir` is not set.

References

External links from the advisory. They lead to third-party sites.