{"action":"Upgrade studio-42/elfinder to 2.1.37 or later.","affected":[{"fixed":"2.1.37","introduced":"2.1.12"}],"component":"studio-42/elfinder","cve_ids":["CVE-2018-9110"],"ecosystem":"Packagist","epss":0.0288,"exploited":false,"fixed_versions":["2.1.37"],"ghsa_id":"GHSA-44p8-c3wv-f28r","id":"tcs_01M5KETJZVSGN4J673NCQEDSZG","modified_at":"2024-02-16T08:13:00.747431Z","published_at":"2022-05-13T01:06:17Z","references":["https://osv.dev/vulnerability/GHSA-44p8-c3wv-f28r","https://nvd.nist.gov/vuln/detail/CVE-2018-9110","https://github.com/Studio-42/elFinder/commit/e6351557b86cc10a7651253d2d2aff7f6b918f8e","https://github.com/Studio-42/elFinder/releases/tag/2.1.37","https://github.com/Studio-42/elFinder/wiki/Advisory-about-vulnerability-of-CVE-2018-9109-and-CVE-2018-9110"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-44p8-c3wv-f28r","url":"https://osv.dev/vulnerability/GHSA-44p8-c3wv-f28r"}],"summary":"Directory Traversal in Studio 42 elFinder"}