CVEvulnerability
CVE-2022-26960
9.1 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2022-03-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-22
Description
connector.minimal.php in std42 elFinder through 2.1.60 is affected by path traversal. This allows unauthenticated remote attackers to read, write, and browse files outside the configured document root. This is due to improper handling of absolute file paths.
Affected configurations
• std42 elfinder (< 2.1.61)
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- https://github.com/Studio-42/elFinder/commit/3b758495538a448ac8830ee3559e7fb2c260c6db Patch, Third Party Advisory
- https://www.synacktiv.com/publications.html Product
- https://www.synacktiv.com/publications/elfinder-the-story-of-a-repwning.html Exploit, Technical Description, Third Party Advisory
- https://github.com/Studio-42/elFinder/commit/3b758495538a448ac8830ee3559e7fb2c260c6db Patch, Third Party Advisory
- https://www.synacktiv.com/publications.html Product
- https://www.synacktiv.com/publications/elfinder-the-story-of-a-repwning.html Exploit, Technical Description, Third Party Advisory