CVE-2021-32682

CRITICAL NUCLEI

elFinder <2.1.58 - RCE

Title source: llm

Description

elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Several vulnerabilities affect elFinder 2.1.58. These vulnerabilities can allow an attacker to execute arbitrary code and commands on the server hosting the elFinder PHP connector, even with minimal configuration. The issues were patched in version 2.1.59. As a workaround, ensure the connector is not exposed without authentication.

Exploits (1)

metasploit WORKING POC EXCELLENT

by Thomas Chauchefoin, Shelby Pace · rubypoclinux

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/elfinder_archive_cmd_injection.rb

View Code ZIP pw:eip

Nuclei Templates (1)

elFinder 2.1.58 - Remote Code Execution

CRITICALby smaranchand

References (4)

[Exploit, Third Party Advisory, VDB Entry] http://packetstormsecurity.com/files/164173/elFinder-Archive-Command-Injection.html

[Exploit, Third Party Advisory] https://blog.sonarsource.com/elfinder-case-study-of-web-file-manager-vulnerabilities/

[Patch, Third Party Advisory] https://github.com/Studio-42/elFinder/commit/a106c350b7dfe666a81d6b576816db9fe0899b17

[Third Party Advisory] https://github.com/Studio-42/elFinder/security/advisories/GHSA-wph3-44rj-92pr

Scores

CVSS v3 9.8

EPSS 0.9277

EPSS Percentile 99.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-22 CWE-78 CWE-918

Status published

Products (2)

std42/elfinder < 2.1.59

studio-42/elfinder 0 - 2.1.59Packagist

Published Jun 14, 2021

Tracked Since Feb 18, 2026