{"action":"Upgrade studio-42/elfinder to 2.1.60 or later.","affected":[{"fixed":"2.1.60","introduced":"2.0.4"}],"component":"studio-42/elfinder","cve_ids":["CVE-2021-43421"],"ecosystem":"Packagist","epss":0.42781,"exploited":false,"fixed_versions":["2.1.60"],"ghsa_id":"GHSA-x4jx-hjwf-gc99","id":"tcs_01M5KFAMZ0AQ44QJ1N78RNYXE6","modified_at":"2024-02-16T08:08:42.912906Z","published_at":"2022-04-08T00:00:23Z","references":["https://osv.dev/vulnerability/GHSA-x4jx-hjwf-gc99","https://nvd.nist.gov/vuln/detail/CVE-2021-43421","https://github.com/Studio-42/elFinder/issues/3429","https://github.com/Studio-42/elFinder/commit/c08bcbfa722d758d01975799b7036951eb5d33cb","https://github.com/Studio-42/elFinder","https://twitter.com/infosec_90/status/1455180286354919425"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-x4jx-hjwf-gc99","url":"https://osv.dev/vulnerability/GHSA-x4jx-hjwf-gc99"}],"summary":"elFinder Unrestricted File Upload vulnerability"}