Skip to content
OpenAdvisories

Archive

June 2021

Vulnerabilities first published in this month (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-32708 Public exploit

    Time-of-check Time-of-use (TOCTOU) Race Condition in league/flysystem

    Flysystem is an open source file storage library for PHP. The whitespace normalisation using in 1.x and 2.x removes any unicode whitespace. Under certain specific conditions this could potentially allow a malicious user to execute code remotely. The condition…

  • Critical 9.8
    CVE-2021-32682 Public exploit EPSS 70%

    Multiple vulnerabilities leading to RCE

    elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Several vulnerabilities affect elFinder 2.1.58. These vulnerabilities can allow an attacker to execute arbitrary code and commands on the server hosting the elFinder PHP c…