critical9.8
CVE-2023-52044
Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution (RCE) as there is no restriction for uploading files with the .php8 extension.
Impact
Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution (RCE) as there is no restriction for uploading files with the .php8 extension.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Std42 | Elfinder | Version 2.1.62 |