CVE-2023-52044

概要

参考情報

• Studio-42/elFinder · Exploit

elfinder のその他の脆弱性

• CVE-2026-41247緊急 9.8elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.67, elFinder contains a command injecti…
• CVE-2023-52045中 6.1Studio-42 eLfinder 2.1.62 contains a filename restriction bypass leading to a persistent Cross-site Scripting (XSS) vulnerability.
• CVE-2024-38909緊急 9.8Studio 42 elFinder 2.1.64 is vulnerable to Incorrect Access Control. Copying files with an unauthorized extension between server directories…
• CVE-2023-35840中 6.5_joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector.
• CVE-2022-27115緊急 9.8In Studio-42 elFinder 2.1.60, there is a vulnerability that causes remote code execution through file name bypass for file upload.