CVE-2022-27115

CRITICAL CVSS: 9.8 Published: 2022-04-11 Modified: 2026-06-17

Description

In Studio-42 elFinder 2.1.60, there is a vulnerability that causes remote code execution through file name bypass for file upload.

Affected Platforms

Std42 ElfinderMicrosoft Windows

Weakness Type

CWE-434

References