Read the docs
TI-2022-10186 Aliases CVE-2022-26960GHSA-7q88-jxvp-9gp2

connector.minimal.php in std42 elFinder through 2.1.60 is affected by path traversal.

Priority HIGH 71CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub.

Summary

connector.minimal.php in std42 elFinder through 2.1.60 is affected by path traversal. This allows unauthenticated remote attackers to read, write, and browse files outside the configured document root. This is due to improper handling of absolute file paths.

Why it matters now

EPSS 0.50993 98th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed studio-42/elfinder (Packagist): 2.1.61

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
—studio-42/elfinder (Packagist)before 2.1.612.1.61Patch availableGHSA-7q88-jxvp-9gp2
  • — Vendor— Affected all versions Fixed in — No fix listed CNA
  • studio-42/elfinder (Packagist) Vendor— Affected before 2.1.61 Fixed in 2.1.61 Patch available GHSA-7q88-jxvp-9gp2

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:std42:elfinder:*:*:*:*:*:*:*:*before 2.1.61VulnerableStd42
  • cpe:2.3:a:std42:elfinder:*:*:*:*:*:*:*:* Versions before 2.1.61 Vulnerable ·Std42

Remediation

  • Fix · GHSA-7q88-jxvp-9gp2 studio-42/elfinder (Packagist) Fixed in 2.1.61 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-26960
  2. 2026-10-03 Alias added: GHSA-7q88-jxvp-9gp2

References

Exploit 1

Patch 1

Advisory 1

Other 1

  • TI-2019-06652 elFinder before 2.1.48 has a command injection vulnerability in the PHP connector. CVSS 3.0CRITICAL 9.8
  • TI-2023-28504 Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution (RCE) as there is no… CVSS 3.1CRITICAL 9.8
  • TI-2021-12350 Multiple vulnerabilities leading to RCE CVSS 3.1CRITICAL 9.8
  • TI-2021-19360 A File Upload vulnerability exists in Studio-42 elFinder 2.0.4 to 2.1.59 via… CVSS 3.1CRITICAL 9.8
  • TI-2022-10265 In Studio-42 elFinder 2.1.60, there is a vulnerability that causes remote code execution… CVSS 3.1CRITICAL 9.8
  • TI-2023-17916 _joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows… CVSS 3.1MEDIUM 6.5
See all 15 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences