Skip to content
OpenAdvisories

Vendor

efwGrp

4 known vulnerabilities.

Products

efw4.X 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-44260

    efw4.X: readonly Flag Not Enforced Server-Side

    efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, the readonly flag set on the <efw:elFinder> JSP tag is intended to prevent file modifications. When protected=true, elfinder_checkRisk enforces that the client sends readonly=true (matching the ses…

    efwGrp efw4.X