RCE in Studio-42 elFinder on Windows before 2.1.61

CRÍTICO 9.8CVE-2022-27115 · GHSA-6p96-vfrc-fv32 · Published 11/04/2022 · updated 17/06/2026

Em resumo

CVE-2022-27115 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta studio-42/elfinder, elfinder (std42).
Chance de exploração nos próximos 30 dias (EPSS): 28.6%, maior que 98.1% das vulnerabilidades.
Correção: atualize para 2.1.61 ou posterior.

Package	Affected versions	Patched versions
studio-42/elfinder Packagist	`< 2.1.61`	`2.1.61`
elfinder std42	`= 2.1.60`	No fix yet

In Studio-42 elFinder 2.1.60, there is a vulnerability that causes remote code execution through file name bypass for file upload.

NVD description

In Studio-42 elFinder 2.1.60, there is a vulnerability that causes remote code execution through file name bypass for file upload.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 2.1.61

2.1.61

= 2.1.60

No fix yet

Mais vulnerabilidades de studio-42/elfinder

Ver tudo →