CVE-2023-52044
Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution (RCE) as there is no restriction for uploading files with the .php8 extension.
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution (RCE) as there is no restriction for uploading files with the .php8 extension.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report github.com