A Server Side Request Forgery (SSRF) vulnerability in elFinder before 2.1.46 could allow a malicious user to access the content of internal network resources. This occurs in get_remote_contents() in php/elFinder.class.php.
References
Link | Resource |
---|---|
https://github.com/Studio-42/elFinder/blob/68ec63c0aeca3963101aca8f842dc9f2e4c4c6d3/Changelog | Third Party Advisory |
https://github.com/Studio-42/elFinder/commit/2f522db8f037a66ce9040ee0b216aa4a0359286c | Patch Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2022-10-03T16:19:25
Updated: 2022-10-03T16:19:25
Reserved: 2022-10-03T00:00:00
Link: CVE-2019-6257
JSON object: View
NVD Information
Status : Analyzed
Published: 2019-01-14T08:29:00.473
Modified: 2021-09-09T12:47:56.577
Link: CVE-2019-6257
JSON object: View
Redhat Information
No data.
CWE