En resumen
- CVE-2024-38909 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a studio-42/elfinder, elfinder (std42).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.48%, mayor que el 41.4% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
Description
Studio 42 elFinder 2.1.64 is vulnerable to Incorrect Access Control. Copying files with an unauthorized extension between server directories allows an arbitrary attacker to expose secrets, perform RCE, etc.
NVD description
Studio 42 elFinder 2.1.64 is vulnerable to Incorrect Access Control. Copying files with an unauthorized extension between server directories allows an arbitrary attacker to expose secrets, perform RCE, etc.
Más vulnerabilidades de studio-42/elfinder
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free