Sensitive Data Exposure in elFinder

MEDIO 5.9CVE-2019-5884 · GHSA-jcgc-vxqg-85xx · Published 10/01/2019 · updated 17/06/2026

En resumen

CVE-2019-5884 es una vulnerabilidad MEDIO (CVSS 5.9) que afecta a studio-42/elfinder, elfinder (std42).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.3%, mayor que el 69.9% de las vulnerabilidades.
Solución: actualizar a 2.1.45 o posterior.

Package	Affected versions	Patched versions
studio-42/elfinder Packagist	`< 2.1.45`	`2.1.45`
elfinder std42	`< 2.1.45`	`2.1.45`

php/elFinder.class.php in elFinder before 2.1.45 leaks information if PHP's curl extension is enabled and safe_mode or open_basedir is not set.

NVD description

php/elFinder.class.php in elFinder before 2.1.45 leaks information if PHP's curl extension is enabled and safe_mode or open_basedir is not set.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 2.1.45

2.1.45

< 2.1.45

2.1.45

Description

php/elFinder.class.php in elFinder before 2.1.45 leaks information if PHP's curl extension is enabled and safe_mode or open_basedir is not set.

NVD description

php/elFinder.class.php in elFinder before 2.1.45 leaks information if PHP's curl extension is enabled and safe_mode or open_basedir is not set.

Más vulnerabilidades de studio-42/elfinder

Ver todo →