Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-52044
9.8
CRITICALCVSS v3
Published
October 31, 2024
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution (RCE) as there is no restriction for uploading files with the .php8 extension.
Studio-42/elFinder
GitHub📁 Open-source file manager for web, written in JavaScript using jQuery and jQuery UI
GitHub📁 Open-source file manager for web, written in JavaScript using jQuery and jQuery UI= 2.1.62NVD