Executive brief
elFinder before 2.1.59 contains multiple vulnerabilities leading to RCE
Affected products
- Packagist studio-42/elfinder
Junglewise Threat Intelligence
CVE-2021-32682: elFinder before 2.1.59 contains multiple vulnerabilities leading to RCE
CVE-2021-32682 · Severity: low · CVSS 3.1 · Published 2021-06-16
Technologies: studio-42/elfinder (Packagist). Vendors: Packagist.
Related threats
- elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, checkExtractItems() in php/elFinder
- elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, the netmount command is omitted fro
- elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, elFinder URL uploads in php/elFinde
- Studio-42 elFinder SQL injection in elFinderVolumeMySQL
- elFinder: Command injection in resize background color parameter when using ImageMagick CLI