Skip to content
OpenAdvisories

Package · Packagist

studio-42/elfinder

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2021-23394 Public exploit Scanner template EPSS 19%

    Remote Code Execution (RCE)

    The package studio-42/elfinder before 2.1.58 are vulnerable to Remote Code Execution (RCE) via execution of PHP code in a .phar file. NOTE: This only applies if the server parses .phar files as PHP.

    studio-42/elfinder Packagist