Update CVE-2022-0543

patch-1
PikPikcU 2022-06-30 19:19:18 -04:00 committed by GitHub
parent ec5b530025
commit 789f659645
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions

View File

@ -2,7 +2,7 @@ id: CVE-2022-0543
info:
name: elFinder - Path Traversal
author: PIKPIKCU
author: pikpikcu
severity: critical
description: |
Connector.minimal.php in std42 elFinder through 2.1.60 is affected by path traversal. This allows unauthenticated remote attackers to read, write, and browse files outside the configured document root. This is due to improper handling of absolute file paths.