elFinder command injection vulnerability in the PHP connector

CRÍTICO 9.8CVE-2019-9194 · GHSA-4223-qj94-7x9p · Published 26/02/2019 · updated 17/06/2026

Em resumo

CVE-2019-9194 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta studio-42/elfinder, elfinder (std42).
Chance de exploração nos próximos 30 dias (EPSS): 96.7%, maior que 99.9% das vulnerabilidades.
Correção: atualize para 2.1.48 ou posterior.

Package	Affected versions	Patched versions
studio-42/elfinder Packagist	`< 2.1.48`	`2.1.48`
elfinder std42	`< 2.1.48`	`2.1.48`

elFinder before 2.1.48 has a command injection vulnerability in the PHP connector.

NVD description

elFinder before 2.1.48 has a command injection vulnerability in the PHP connector.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 2.1.48

2.1.48

< 2.1.48

2.1.48

Mais vulnerabilidades de studio-42/elfinder

Ver tudo →