CVE-2021-23394

8.1

HIGHCVSS v3

Published

June 13, 2021

CVSS v2

6.8 MEDIUM

Affected

1 project

Assigned by

[email protected]

Severity scale

010

Description

The package studio-42/elfinder before 2.1.58 are vulnerable to Remote Code Execution (RCE) via execution of PHP code in a .phar file. NOTE: This only applies if the server parses .phar files as PHP.

Studio-42/elFinder

GitHub📁 Open-source file manager for web, written in JavaScript using jQuery and jQuery UI

< 2.1.58NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2021-23394

Description

More on this CVE