Std42 Elfinder vulnerabilities

• std42 elfinder elFinder: Command injection in resize background color parameter when using ImageMagick CLI CVE-2026-41247 Fix available 8.9 HighApril 17, 2026
• std42 elfinder Studio-42 eLfinder 2.1.62 contains a filename restriction bypass leading to a persistent Cross... CVE-2023-52045 6.1 MediumOctober 31, 2024
• std42 elfinder Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution (RCE) as there is no restriction... CVE-2023-52044 9.8 CriticalOctober 31, 2024
• std42 elfinder Studio 42 elFinder vulnerable to Incorrect Access Control CVE-2024-38909 9.8 CriticalJuly 30, 2024
• std42 elfinder elFinder vulnerable to path traversal in LocalVolumeDriver connector CVE-2023-35840 Public exploitFix available 6.5 MediumJune 14, 2023
• std42 elfinder RCE in Studio-42 elFinder on Windows before 2.1.61 CVE-2022-27115 Fix available EPSS 28.6% 9.8 CriticalApril 11, 2022
• std42 elfinder elFinder Unrestricted File Upload vulnerability CVE-2021-43421 Fix available EPSS 42.8% 9.8 CriticalApril 7, 2022
• std42 elfinder Path Traversal in Studio-42 elFinder through 2.1.60 CVE-2022-26960 Fix available EPSS 51.0% 9.1 CriticalMarch 21, 2022
• std42 elfinder Studio 42 elFinder allows stored XSS CVE-2021-45919 5.4 MediumFebruary 8, 2022
• std42 elfinder Multiple vulnerabilities leading to RCE CVE-2021-32682 Public exploitFix available EPSS 69.9% 9.8 CriticalJune 14, 2021
• std42 elfinder Remote Code Execution (RCE) CVE-2021-23394 Public exploitFix available EPSS 18.9% 8.1 HighJune 13, 2021
• std42 elfinder elFinder command injection vulnerability in the PHP connector CVE-2019-9194 Public exploitFix available EPSS 96.7% 9.8 CriticalFebruary 26, 2019
• std42 elfinder elFinder Server Side Request Forgery (SSRF) CVE-2019-6257 Fix available 7.7 HighJanuary 14, 2019
• std42 elfinder Sensitive Data Exposure in elFinder CVE-2019-5884 Fix available 5.9 MediumJanuary 10, 2019
• std42 elfinder Directory Traversal in Studio 42 elFinder CVE-2018-9110 Fix available 9.1 CriticalMarch 28, 2018
• std42 elfinder elFinder Path Traversal vulnerability CVE-2018-9109 Fix available 9.1 CriticalMarch 28, 2018