CVE-2024-38909

Summary

Studio 42 elFinder 2.1.64 is vulnerable to Incorrect Access Control. Copying files with an unauthorized extension between server directories allows an arbitrary attacker to expose secrets, perform RCE, etc.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

CVE Program Container

Additional References

• http://elfinder.com
• https://github.com/B0D0B0P0T/CVE/blob/main/CVE-2024-38909

References

• https://github.com/B0D0B0P0T/CVE/blob/main/CVE-2024-38909

• ←Previous
• Next→