Skip to content
OpenAdvisories

Vendor

Studio-42

6 known vulnerabilities.

Products

elFinder 6
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.1
    CVE-2026-81891

    elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE)

    elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, checkExtractItems() in php/elFinderVolumeDriver.class.php calls mimetypeInternalDetect() without passing the result through mimeTypeNormalize(). Because t…

    Studio-42 elFinder studio-42/elfinder Packagist
  • High 8.6
    CVE-2026-81889

    elFinder: SSRF protection bypass via DNS rebinding in the `fsock_get_contents()` fallback

    elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, elFinder URL uploads in php/elFinder.class.php can bypass server-side request forgery protections when PHP cURL is unavailable because validate_address() …

    Studio-42 elFinder studio-42/elfinder Packagist
  • High 8.8
    CVE-2026-44521

    elFinder: SQL Injection MySQL Volume Driver (elFinderVolumeMySQL)

    elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.68, an authenticated SQL injection vulnerability in the elFinder MySQL volume driver (elFinderVolumeMySQL) allows any logged-in user, including users with rea…

    Studio-42 elFinder studio-42/elfinder Packagist
  • High 8.9
    CVE-2026-41247

    elFinder: Command injection in resize background color parameter when using ImageMagick CLI

    elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.67, elFinder contains a command injection vulnerability in the resize command. The bg (background color) parameter is accepted from user input and passed thro…

    Studio-42 elFinder studio-42/elfinder Packagist