CVE-2018-9110: Path Traversal
Studio 42 elFinder before 2.1.37 has a directory traversal vulnerability in elFinder.class.php with the zipdl() function that can allow a remote attacker to download files accessible by the web server process and delete files owned by the account running the web server process. NOTE: this issue exists because of an incomplete fix for CVE-2018-9109.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Studio 42 elFinderto a version that resolves this vulnerability.Fixed in 2.1.37 - Compensating control
Apply compensating controls such as restricting access to the elFinder endpoint (e.g., via firewall/ACL/WAF) to limit exposure to remote attackers until the upgrade to 2.1.37 is completed.
Event History
Frequently Asked Questions
What is the severity of CVE-2018-9110?
CVE-2018-9110 has a medium severity rating due to its potential to allow remote file access and deletion.
How do I fix CVE-2018-9110?
To fix CVE-2018-9110, upgrade elFinder to version 2.1.37 or later.
What impact does CVE-2018-9110 have on my server?
CVE-2018-9110 can allow an attacker to download sensitive files from the server or delete files owned by the web server process.
Which versions of elFinder are affected by CVE-2018-9110?
elFinder versions prior to 2.1.37 are vulnerable to CVE-2018-9110.
Is CVE-2018-9110 a directory traversal vulnerability?
Yes, CVE-2018-9110 is specifically a directory traversal vulnerability.