Multiple vulnerabilities leading to RCE
75Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 9.8epss 70%
from disclosure to weapon0 days
Published on NVDJun 14
metasploitJun 13
exploitation probability
70%top 1% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Several vulnerabilities affect elFinder 2.1.58. These vulnerabilities can allow an attacker to execute arbitrary code and commands on the server hosting the elFinder PHP connector, even with minimal configuration. The issues were patched in version 2.1.59. As a workaround, ensure the connector is not exposed without authentication.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Studio-42 · elFinderpublic PoCs found — 1
cve_referencepacketstormsecurity.com/files/164173/elFinder-Archive-Command-Injection.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://packetstormsecurity.com/files/164173/elFinder-Archive-Command-Injection.htmlhttps://blog.sonarsource.com/elfinder-case-study-of-web-file-manager-vulnerabilities/https://github.com/Studio-42/elFinder/commit/a106c350b7dfe666a81d6b576816db9fe0899b17https://github.com/Studio-42/elFinder/security/advisories/GHSA-wph3-44rj-92pr