Studio 42 elFinder 2.1.64 is vulnerable to Incorrect Access Control. Copying files with an unauthorized extension between server directories allows an arbitrary attacker to expose secrets, perform RCE, etc.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| studio-42/elfinder(Packagist) | 0 | N/A | N/A |
CVSS Metrics
