Studio 42 elFinder vulnerable to Incorrect Access Control

Description

References

• nvd.nist.gov/vuln/detail/CVE-2024-38909 · ADVISORY
• B0D0B0P0T/CVE · WEB
• Studio-42/elFinder · PACKAGE
• elfinder.com · WEB

Mais vulnerabilidades de studio-42/elfinder

• CVE-2026-81890MÉDIO 5.4elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, the netmount command is omitted fro…
• CVE-2026-81889ALTO 8.6elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, elFinder URL uploads in php/elFinde…
• CVE-2026-44521ALTO 8.8elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.68, an authenticated SQL injection vuln…
• CVE-2026-41247CRÍTICO 9.8elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.67, elFinder contains a command injecti…
• CVE-2023-35840MÉDIO 6.5_joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector.