Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-43421
9.8
CRITICALCVSS v3
Published
April 7, 2022
CVSS v2
7.5 HIGH
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
A File Upload vulnerability exists in Studio-42 elFinder 2.0.4 to 2.1.59 via connector.minimal.php, which allows a remote malicious user to upload arbitrary files and execute PHP code.
Studio-42/elFinder
GitHub📁 Open-source file manager for web, written in JavaScript using jQuery and jQuery UI
GitHub📁 Open-source file manager for web, written in JavaScript using jQuery and jQuery UI>= 2.0.4, <= 2.1.59, >= 2.0.4, < 2.1.60NVD