PT-2022-18143 · Elfinder · Elfinder

Gaetan Ferry · Published 2022-03-21 · Updated 2022-06-30 · CVE-2022-26960

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions elFinder versions 2.1.60 and earlier

Description The issue allows unauthenticated remote attackers to read, write, and browse files outside the configured document root due to improper handling of absolute file paths in the connector.minimal.php file. This enables attackers to access sensitive information and potentially cause damage by modifying files.

Recommendations For versions 2.1.60 and earlier, update to a version later than 2.1.60 to resolve the issue. As a temporary workaround, consider restricting access to the connector.minimal.php file to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-26960

GHSA-7Q88-JXVP-9GP2

Affected Products

Elfinder

References · 7

• 🔥 https://synacktiv.com/publications/elfinder-the-story-of-a-repwning.html · Exploit
• https://github.com/Studio-42/elFinder/commit/3b758495538a448ac8830ee3559e7fb2c260c6db · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-26960 · Security Note
• https://osv.dev/vulnerability/CVE-2022-26960 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-7q88-jxvp-9gp2 · Vendor Advisory
• https://synacktiv.com/publications.html · Note
• https://t.me/cibsecurity/39316 · Telegram Post