Critical severity9.8NVD Advisory· Published Apr 11, 2022· Updated Jun 17, 2026
CVE-2022-27115
CVE-2022-27115
Description
In Studio-42 elFinder 2.1.60, there is a vulnerability that causes remote code execution through file name bypass for file upload.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
studio-42/elfinderPackagist | < 2.1.61 | 2.1.61 |
Affected products
2Patches
Vulnerability mechanics
References
4- github.com/Studio-42/elFinder/issues/3458nvdExploitPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-6p96-vfrc-fv32ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2022-27115ghsaADVISORY
- github.com/Studio-42/elFinder/commit/69be51eea5b484822a29ddd40f1b72845954ba60ghsaWEB
News mentions
0No linked articles in our index yet.