← All advisories

Moderate severityOSV Advisory· Published Jan 10, 2019· Updated Aug 4, 2024

CVE-2019-5884

CVE-2019-5884

Description

php/elFinder.class.php in elFinder before 2.1.45 leaks information if PHP's curl extension is enabled and safe_mode or open_basedir is not set.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
studio-42/elfinderPackagist	< 2.1.45	2.1.45

Affected products

2

Studio 42/ElfinderOSV
Range: 1.0.1, 2.0-beta, 2.1.0, …
ghsa-coords
pkg:composer/studio-42/elfinder
Range: < 2.1.45

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-jcgc-vxqg-85xxghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-5884ghsaADVISORY
github.com/Studio-42/elFinder/commit/f133163f2d754584de65d718b2fde96191557316ghsax_refsource_MISCWEB
github.com/Studio-42/elFinder/releases/tag/2.1.45ghsax_refsource_MISCWEB

News mentions

0

No linked articles in our index yet.