Description
php/elFinder.class.php in elFinder before 2.1.45 leaks information if PHP's curl extension is enabled and safe_mode or open_basedir is not set.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | studio-42/elfinder | < 2.1.45 | 2.1.45 | GHSA-jcgc-vxqg-85xx |