{"action":"Upgrade studio-42/elfinder to 2.1.59 or later.","affected":[{"fixed":"2.1.59","introduced":"0"}],"component":"studio-42/elfinder","cve_ids":["CVE-2021-32682"],"ecosystem":"Packagist","epss":0.69934,"exploited":false,"fixed_versions":["2.1.59"],"ghsa_id":"GHSA-wph3-44rj-92pr","id":"tcs_01M5KFA8D64SVST6D7FS5ZC0CZ","modified_at":"2026-07-08T06:28:05.746071553Z","published_at":"2021-06-16T17:04:29Z","references":["https://osv.dev/vulnerability/GHSA-wph3-44rj-92pr","https://github.com/Studio-42/elFinder/security/advisories/GHSA-qm58-cvvm-c5qr","https://github.com/Studio-42/elFinder/security/advisories/GHSA-wph3-44rj-92pr","https://nvd.nist.gov/vuln/detail/CVE-2021-32682","https://github.com/Studio-42/elFinder/commit/a106c350b7dfe666a81d6b576816db9fe0899b17","https://blog.sonarsource.com/elfinder-case-study-of-web-file-manager-vulnerabilities","https://github.com/Studio-42/elFinder","http://packetstormsecurity.com/files/164173/elFinder-Archive-Command-Injection.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-wph3-44rj-92pr","url":"https://osv.dev/vulnerability/GHSA-wph3-44rj-92pr"}],"summary":"elFinder before 2.1.59 contains multiple vulnerabilities leading to RCE"}