{"action":"Upgrade studio-42/elfinder to 2.1.61 or later.","affected":[{"fixed":"2.1.61","introduced":"0"}],"component":"studio-42/elfinder","cve_ids":["CVE-2022-26960"],"ecosystem":"Packagist","epss":0.50993,"exploited":false,"fixed_versions":["2.1.61"],"ghsa_id":"GHSA-7q88-jxvp-9gp2","id":"tcs_01M5KEYB4WK4T7YRWNPFVVPSF5","modified_at":"2024-02-16T07:57:42.381711Z","published_at":"2022-03-22T00:00:41Z","references":["https://osv.dev/vulnerability/GHSA-7q88-jxvp-9gp2","https://nvd.nist.gov/vuln/detail/CVE-2022-26960","https://github.com/Studio-42/elFinder/commit/3b758495538a448ac8830ee3559e7fb2c260c6db","https://www.synacktiv.com/publications/elfinder-the-story-of-a-repwning.html"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-7q88-jxvp-9gp2","url":"https://osv.dev/vulnerability/GHSA-7q88-jxvp-9gp2"}],"summary":"Path Traversal in Studio-42 elFinder through 2.1.60"}