Skip to content
OpenAdvisories

Vendor

Studio-42

6 known vulnerabilities.

Products

elFinder 6
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-81890

    elFinder: CSRF in netmount allows forced FTP mounts and server-side FTP connections

    elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, the netmount command is omitted from elFinderConnector::$csrfProtectedCmds in php/elFinderConnector.class.php, so validateCsrfToken() is not called for th…

    Studio-42 elFinder studio-42/elfinder Packagist