Lucene search
Veracode Vulnerability DatabaseVERACODE:34776HistoryMar 22, 2022 - 4:09 a.m.
Path Traversal
2022-03-2204:09:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
24
path traversal
studio-42/elfinder
improper handling
absolute file paths
getfullpath function
remote attacker
data access
software
EPSS
0.86
Percentile
98.6%
studio-42/elfinder is vulnerable to path traversal. The vulnerability exists due to improper handling of absolute file paths in the getFullPathfunction. allowing a remote attacker to access data in the system.
Related
nvd
nvd
CVE-2022-26960
2022-03-21 17:15:07
cvelist
cvelist
CVE-2022-26960
2022-03-21 16:52:38
openvas
openvas
elFinder < 2.1.61 Multiple Vulnerabilities - Version Check
2022-03-25 00:00:00
elFinder < 2.1.61 Directory Traversal Vulnerability - Active Check
2022-07-05 00:00:00
checkpoint_advisories
checkpoint_advisories
Studio42 elFinder Directory Traversal (CVE-2022-26960)
2022-11-21 00:00:00
prion
prion
Path traversal
2022-03-21 17:15:00
nuclei
nuclei
elFinder <=2.1.60 - Local File Inclusion
2022-06-30 23:31:46
cve
cve
CVE-2022-26960
2022-03-21 17:15:07
osv
osv
CVE-2022-26960
2022-03-21 17:15:07
Path Traversal in Studio-42 elFinder through 2.1.60
2022-03-22 00:00:41
github
github
Path Traversal in Studio-42 elFinder through 2.1.60
2022-03-22 00:00:41