Critical flaws fixed in web file manager elFinder

guest · Aug 24, 2021

Critical vulnerabilities in web file manager elFinder leave servers susceptible to takeover
Immediate triage urged as researchers warn in-the-wild exploitation likely
August 23, 2021
https://portswigger.net/daily-swig/...lfinder-leave-servers-susceptible-to-takeover

Critical vulnerabilities in elFinder, the popular open source web file manager, can enable unauthenticated attackers to execute arbitrary PHP code on servers hosting elFinder’s back-end PHP connector.

JavaScript-based elFinder is used to manage local and remote files in conjunction with content management systems and frameworks such as WordPress File Manager and Symfony bundles.
Security researchers have documented five vulnerability chains that combine otherwise “innocuous bugs” to forge exploit chains capable of seizing control of servers.
Click to expand...

Fortunately, the flaws were recently patched. Thomas Chauchefoin, vulnerability researcher at SonarSource, urged users to update their systems as soon as possible.

“There is no doubt these vulnerabilities will also be exploited in the wild, because exploits targeting old versions have been publicly released and the connectors filenames are part of compilations of paths to look for when trying to compromise websites,” he said in a blog post.
Click to expand...

The flaws
All rated CVSS 9.8, the flaws include four issues affecting elFinder 2.1.58 that can enable attackers to move or delete arbitrary files, as well as argument injection and race condition bugs (CVE-2021-32682).

Versions before 2.1.58 are also affected by a remote code execution (RCE) bug that is exploited via the execution of PHP code in a .phar file – but only if the server parses .phar files as PHP (CVE-2021-23394).
Click to expand...

Log in or Sign up

Critical flaws fixed in web file manager elFinder

guest Guest

Log in or Sign up

Critical flaws fixed in web file manager elFinder

guest Guest

Useful Searches