CVE-2023-52044

Description

References

• Studio-42/elFinder · Exploit

elfinder의 다른 취약점

• CVE-2026-41247심각 9.8elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.67, elFinder contains a command injecti…
• CVE-2023-52045보통 6.1Studio-42 eLfinder 2.1.62 contains a filename restriction bypass leading to a persistent Cross-site Scripting (XSS) vulnerability.
• CVE-2024-38909심각 9.8Studio 42 elFinder 2.1.64 is vulnerable to Incorrect Access Control. Copying files with an unauthorized extension between server directories…
• CVE-2023-35840보통 6.5_joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector.
• CVE-2022-27115심각 9.8In Studio-42 elFinder 2.1.60, there is a vulnerability that causes remote code execution through file name bypass for file upload.