CVE-2023-52044

Published
View on NVD ↗
CVSS v3
9.8
CRITICAL
CVSS v2
N/A
Affected
1
PROJECT

Description

Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution (RCE) as there is no restriction for uploading files with the .php8 extension.

📁 Open-source file manager for web, written in JavaScript using jQuery and jQuery UI
GitHubGitHub
4.79K