← Database

CVE-2021-43421

CRITICAL CVSS: 9.8 Published: 2022-04-07 Modified: 2026-06-17

Description

A File Upload vulnerability exists in Studio-42 elFinder 2.0.4 to 2.1.59 via connector.minimal.php, which allows a remote malicious user to upload arbitrary files and execute PHP code.

Affected Platforms

Std42 Elfinder

Weakness Type

CWE-434

References