New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CVE-2022-27115 (remote code execution) #91

Closed

kisuka opened this issue Aug 24, 2023 · 1 comment

kisuka commented Aug 24, 2023

In Studio-42 elFinder 2.1.60, there is a vulnerability that causes remote code execution through file name bypass for file upload.

Studio-42/elFinder#3458
https://nvd.nist.gov/vuln/detail/CVE-2022-27115

barryvdh closed this as completed in

d9453b0

Owner

barryvdh commented Aug 28, 2023

If you update with composer you should get the .62 version already. But I've bumped it to make sure it doesn't allow older versions; d9453b0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment