The package studio-42/elfinder before 2.1.58 are vulnerable to Remote Code Execution (RCE) via execution of PHP code in a .phar file. NOTE: This only applies if the server parses .phar files as PHP.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| studio-42/elfinder(Packagist) | 0 | 2.1.58 | N/A |
CVSS Metrics
