Improper authorization control for web services In studio-42/elfinder
Description
Studio 42 elFinder vulnerable to Incorrect Access Control Studio 42 elFinder 2.1.64 is vulnerable to Incorrect Access Control. Copying files with an unauthorized extension between server directories allows an arbitrary attacker to expose secrets, perform RCE, etc.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 packagist | 2.1.65 |
Aliases
1. 2. 3. 4.
References
1. 2.