CVE-2021-43421
1 advisory.
Packagist/studio-42/elfinder CVE-2021-43421: critical 9.8, EPSS 42.78%
elFinder Unrestricted File Upload vulnerability
Action: Upgrade studio-42/elfinder to 2.1.60 or later.
composer require studio-42/elfinder:2.1.60Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.4 | 2.1.60 | - |
Fixed versions
| 2.1.60 |
Sources
- osv: GHSA-x4jx-hjwf-gc99
- https://nvd.nist.gov/vuln/detail/CVE-2021-43421
- https://github.com/Studio-42/elFinder/issues/3429
- https://github.com/Studio-42/elFinder/commit/c08bcbfa722d758d01975799b7036951eb5d33cb
- https://github.com/Studio-42/elFinder
- https://twitter.com/infosec_90/status/1455180286354919425
CVE-2021-43421 · published · modified · JSON