CVE-2021-23394
HIGH EXPLOITED NUCLEIelFinder < 2.1.58 - Remote Code Execution via .phar File Upload
Title source: llmExploitation Summary
CVE-2021-23394 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including 0xnemian. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository provides a Docker-based reproduction setup for CVE-2021-23394, an arbitrary file execution vulnerability in elFinder. It includes vulnerable (2.1.57) and patched (2.1.66) versions of elFinder running on both Apache and Nginx, allowing for testing and verification of the vulnerability using Nuclei.
Description
The package studio-42/elfinder before 2.1.58 are vulnerable to Remote Code Execution (RCE) via execution of PHP code in a .phar file. NOTE: This only applies if the server parses .phar files as PHP.
Exploits (1)
This repository provides a Docker-based reproduction setup for CVE-2021-23394, an arbitrary file execution vulnerability in elFinder. It includes vulnerable (2.1.57) and patched (2.1.66) versions of elFinder running on both Apache and Nginx, allowing for testing and verification of the vulnerability using Nuclei.
Nuclei Templates (1)
http.title:"elfinder"
title="elfinder"
References (5)
Scores
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H