Lucene search
Veracode Vulnerability DatabaseVERACODE:30957HistoryJun 14, 2021 - 7:29 a.m.
Unrestricted File Upload
2021-06-1407:29:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
file upload security
php code execution
host os vulnerability
software vulnerability
EPSS
0.023
Percentile
89.9%
studio-42/elfinder allows unrestricted file uploads. An attacker is able to upload PHP code in a .phar file and obtain arbitrary code execution on the host OS.
Related
cvelist
cvelist
CVE-2021-23394 Remote Code Execution (RCE)
2021-06-13 11:05:11
cve
cve
CVE-2021-23394
2021-06-13 11:15:14
github
github
elFinder unsafe upload filtering leading to remote code execution
2021-06-15 15:51:02
cnvd
cnvd
Studio-42 Elfinder Remote Code Execution Vulnerability
2021-06-17 00:00:00
prion
prion
Remote code execution
2021-06-13 11:15:00
osv
osv
elFinder unsafe upload filtering leading to remote code execution
2021-06-15 15:51:02
CVE-2021-23394
2021-06-13 11:15:14
nvd
nvd
CVE-2021-23394
2021-06-13 11:15:14
sonarsource
sonarsource
elFinder - A Case Study of Web File Manager Vulnerabilities
2021-08-17 00:00:00