Studio-42 Elfinder vulnerabilities
- studio-42 elfinder elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE) 8.1 High
- studio-42 elfinder elFinder: CSRF in netmount allows forced FTP mounts and server-side FTP connections 5.4 Medium
- studio-42 elfinder elFinder: SSRF protection bypass via DNS rebinding in the `fsock_get_contents()` fallback 8.6 High
- studio-42 elfinder elFinder: SQL Injection MySQL Volume Driver (elFinderVolumeMySQL) 8.8 High
- std42 elfinder elFinder: Command injection in resize background color parameter when using ImageMagick CLI 8.9 High
- std42 elfinder Multiple vulnerabilities leading to RCE 9.8 Critical