CVE-2021-23394: elFinder unsafe upload filtering leading to remote code execution
elFinder unsafe upload filtering leading to remote code execution
Other sources
The package studio-42/elfinder before 2.1.58 are vulnerable to Remote Code Execution (RCE) via execution of PHP code in a .phar file. NOTE: This only applies if the server parses .phar files as PHP.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/studio-42/elfinderto a version that resolves this vulnerability.Fixed in 2.1.58
Event History
Frequently Asked Questions
What is the severity of CVE-2021-23394?
CVE-2021-23394 is rated as a high severity vulnerability due to the risk of Remote Code Execution.
How do I fix CVE-2021-23394?
To fix CVE-2021-23394, upgrade elFinder to version 2.1.58 or later, ensuring that the server does not parse .phar files as PHP.
What type of vulnerability is CVE-2021-23394?
CVE-2021-23394 is classified as a Remote Code Execution (RCE) vulnerability.
Which versions of elFinder are affected by CVE-2021-23394?
CVE-2021-23394 affects all versions of elFinder prior to 2.1.58.
What should I do if I cannot upgrade to fix CVE-2021-23394?
If upgrading is not possible, implement strict file type restrictions and conduct thorough security monitoring to mitigate risks associated with CVE-2021-23394.