Path Traversal in Studio-42 elFinder through 2.1.60

CRITICAL 9.1CVE-2022-26960 · GHSA-7q88-jxvp-9gp2 · Published 21/03/2022 · updated 17/06/2026

Package	Affected versions	Patched versions
studio-42/elfinder Packagist	`< 2.1.61`	`2.1.61`
elfinder std42	`< 2.1.61`	`2.1.61`

Description

connector.minimal.php in std42 elFinder through 2.1.60 is affected by path traversal. This allows unauthenticated remote attackers to read, write, and browse files outside the configured document root. This is due to improper handling of absolute file paths.

NVD description

connector.minimal.php in std42 elFinder through 2.1.60 is affected by path traversal. This allows unauthenticated remote attackers to read, write, and browse files outside the configured document root. This is due to improper handling of absolute file paths.

References

nvd.nist.gov/vuln/detail/CVE-2022-26960 · ADVISORY
Studio-42/elFinder commit 3b75849 · WEB
synacktiv.com/publications/elfinder-the-story-of-a-repwning.html · WEB
synacktiv.com/publications.html · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free