Em resumo
- CVE-2019-6257 é uma vulnerabilidade ALTO (CVSS 7.7) que afeta studio-42/elfinder, elfinder (std42).
- Chance de exploração nos próximos 30 dias (EPSS): 1.1%, maior que 65.6% das vulnerabilidades.
- Correção: atualize para 2.1.49, 2.1.46 ou posterior.
Description
A Server Side Request Forgery (SSRF) vulnerability in elFinder before 2.1.49 could allow a malicious user to access the content of internal network resources. This occurs in get_remote_contents() in php/elFinder.class.php.
NVD description
A Server Side Request Forgery (SSRF) vulnerability in elFinder before 2.1.46 could allow a malicious user to access the content of internal network resources. This occurs in get_remote_contents() in php/elFinder.class.php.
Mais vulnerabilidades de studio-42/elfinder
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free