GHSA-x4jx-hjwf-gc99
elFinder Unrestricted File Upload vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | studio-42/elfinder | >= 2.0.4, < 2.1.60 | 2.1.60 |
Details
As written in the advisory (Markdown source, shown as plain text).
A File Upload vulnerability exists in Studio-42 elFinder 2.0.4 to 2.1.59 via `connector.minimal.php`, which allows a remote malicious user to upload arbitrary files and execute PHP code.
References
External links from the advisory. They lead to third-party sites.