CVE-2024-38909

n/a / n/a PUBLISHED

Description (CNA)

Studio 42 elFinder 2.1.64 is vulnerable to Incorrect Access Control. Copying files with an unauthorized extension between server directories allows an arbitrary attacker to expose secrets, perform RCE, etc.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/B0D0B0P0T/CVE/blob/main/CVE-2024-38909

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://github.com/B0D0B0P0T/CVE/blob/main/CVE-2024-38909