Skip to content
OpenAdvisories
High · 8.1 Scanner template Public exploit CVE-2021-23394 EUVD-2021-1383GHSA-qm58-cvvm-c5qrSNYK-PHP-STUDIO42ELFINDER-1290554

Remote Code Execution (RCE)

Published Jun 13, 2021 · Updated Sep 16, 2024 · Assigned by snyk

Package: studio-42/elfinder Ecosystem: Packagist

Description

The package studio-42/elfinder before 2.1.58 are vulnerable to Remote Code Execution (RCE) via execution of PHP code in a .phar file. NOTE: This only applies if the server parses .phar files as PHP.

Affected products

VendorProductAffectedFixed
— studio-42/elfinder unspecified – < 2.1.58 2.1.58

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • 0xnemian/CVE-2021-23394 ★ 0 · Nov 30, 2025

    Docker container to setup a vulnerable elfinder version on both nginx and apache servers. Can be used to test vulnerability POC

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist studio-42/elfinder < 2.1.58 2.1.58 GHSA-qm58-cvvm-c5qr

References