studio-42/elfinder vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-44521Highstudio-42/elfinder: elFinder MySQL has a SQL Injection in its Volume Driver (elFinderVolumeMySQL)CVE-2026-41247Highstudio-42/elfinder: elFinder: Command injection in resize background color parameter when using ImageMagick CLI CVE-2024-38909Highstudio-42/elfinder: Studio 42 elFinder vulnerable to Incorrect Access Control CVE-2023-35840Highstudio-42/elfinder: elFinder vulnerable to path traversal in LocalVolumeDriver connector CVE-2019-9194Criticalstudio-42/elfinder: elFinder command injection vulnerability in the PHP connector CVE-2018-9110Criticalstudio-42/elfinder: Directory Traversal in Studio 42 elFinder CVE-2019-5884Mediumstudio-42/elfinder: Sensitive Data Exposure in elFinder CVE-2018-9109Criticalstudio-42/elfinder: elFinder Path Traversal vulnerability CVE-2019-6257Highstudio-42/elfinder: elFinder Server Side Request Forgery (SSRF)CVE-2022-27115Criticalstudio-42/elfinder: RCE in Studio-42 elFinder on Windows before 2.1.61 CVE-2021-43421Criticalstudio-42/elfinder: elFinder Unrestricted File Upload vulnerability CVE-2022-26960Criticalstudio-42/elfinder: Path Traversal in Studio-42 elFinder through 2.1.60 CVE-2021-45919Mediumstudio-42/elfinder: Studio 42 elFinder allows stored XSS CVE-2021-32682Criticalstudio-42/elfinder: elFinder before 2.1.59 contains multiple vulnerabilities leading to RCE CVE-2021-23394Highstudio-42/elfinder: elFinder unsafe upload filtering leading to remote code execution

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo