CVE-2018-9110 Directory Traversal in Studio 42 elFinder
CriticalCVSS 9.1
EPSS 2.9%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Studio 42 elFinder before 2.1.37 has a directory traversal vulnerability in elFinder.class.php with the zipdl() function that can allow a remote attacker to download files accessible by the web server process and delete files owned by the account running the web server process. NOTE: this issue exists because of an incomplete fix for CVE-2018-9109.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Studio-42 elFinder(Packagist) | >= 2.1.12, < 2.1.37 | 2.1.37 |
| Studio-42 elFinder(Packagist) | = 2.1.12 | No fix listed |
| Studio-42 elFinder(Packagist) | = 2.1.13 | No fix listed |
| Studio-42 elFinder(Packagist) | = 2.1.14 | No fix listed |
| Studio-42 elFinder(Packagist) | = 2.1.15 | No fix listed |
| Studio-42 elFinder(Packagist) | = 2.1.16 | No fix listed |
| Studio-42 elFinder(Packagist) | = 2.1.17 | No fix listed |
| Studio-42 elFinder(Packagist) | = 2.1.18 | No fix listed |
| Studio-42 elFinder(Packagist) | = 2.1.19 | No fix listed |
| Studio-42 elFinder(Packagist) | = 2.1.20 | No fix listed |
| Studio-42 elFinder(Packagist) | = 2.1.21 | No fix listed |
| Studio-42 elFinder(Packagist) | = 2.1.22 | No fix listed |
| Studio-42 elFinder(Packagist) | = 2.1.23 | No fix listed |
| Studio-42 elFinder(Packagist) | = 2.1.24 | No fix listed |
| Studio-42 elFinder(Packagist) | = 2.1.25 | No fix listed |
| Studio-42 elFinder(Packagist) | = 2.1.26 | No fix listed |
| Studio-42 elFinder(Packagist) | = 2.1.27 | No fix listed |
| Studio-42 elFinder(Packagist) | = 2.1.28 | No fix listed |
| Studio-42 elFinder(Packagist) | = 2.1.29 | No fix listed |
| Studio-42 elFinder(Packagist) | = 2.1.30 | No fix listed |
| Studio-42 elFinder(Packagist) | = 2.1.31 | No fix listed |
| Studio-42 elFinder(Packagist) | = 2.1.32 | No fix listed |
| Studio-42 elFinder(Packagist) | = 2.1.33 | No fix listed |
| Studio-42 elFinder(Packagist) | = 2.1.34 | No fix listed |
| Studio-42 elFinder(Packagist) | = 2.1.35 | No fix listed |
Show 3 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Studio-42 elFinder(Packagist) | = 2.1.36 | No fix listed |
| Studio-42 elFinder(Packagist) | >= 2.1.12, <= 2.1.36 | No fix listed |
| std42 elfinder | < 2.1.37 | 2.1.37 |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch third-party-advisory
- github.com release-notes third-party-advisory
- github.com exploit mitigation third-party-advisory
- github.com