{"action":"Upgrade studio-42/elfinder to 2.1.61 or later.","affected":[{"fixed":"2.1.61","introduced":"0"}],"component":"studio-42/elfinder","cve_ids":["CVE-2022-27115"],"ecosystem":"Packagist","epss":0.28594,"exploited":false,"fixed_versions":["2.1.61"],"ghsa_id":"GHSA-6p96-vfrc-fv32","id":"tcs_01M5KEX80KGYKW04T8AS5RYEK4","modified_at":"2024-02-16T08:16:22.925797Z","published_at":"2022-04-12T00:00:34Z","references":["https://osv.dev/vulnerability/GHSA-6p96-vfrc-fv32","https://nvd.nist.gov/vuln/detail/CVE-2022-27115","https://github.com/Studio-42/elFinder/issues/3458","https://github.com/Studio-42/elFinder/commit/69be51eea5b484822a29ddd40f1b72845954ba60"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-6p96-vfrc-fv32","url":"https://osv.dev/vulnerability/GHSA-6p96-vfrc-fv32"}],"summary":"RCE in Studio-42 elFinder on Windows before 2.1.61"}