CVE-2021-32682

Multiple vulnerabilities leading to RCE

elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Several vulnerabilities affect elFinder 2.1.58. These vulnerabilities can allow an attacker to execute arbitrary code and commands on the server hosting the elFinder PHP connector, even with minimal configuration. The issues were patched in version 2.1.59. As a workaround, ensure the connector is not exposed without authentication.

Affected

Studio-42 · elFinder

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

69.93% chance of exploitation in the next 30 days, 99th percentile

Nuclei

critical · CWE-22

Published

2021-06-14

Updated

2024-08-03

Proof-of-concept exploits (1)

• http://packetstormsecurity.com/files/164173/elFinder-Archive-Command-Injection.html

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32682.yaml

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/elfinder_archive_cmd_…

Vulhub environments (1)

• vulhub/vulhub/tree/master/elfinder/CVE-2021-32682

Security advisories

• https://blog.sonarsource.com/elfinder-case-study-of-web-file-manager-vulnerabilities
• Studio-42/elFinder/commit/a106c350b7dfe666a81d6b576816db9fe0899b17
• Studio-42/elFinder/security/advisories/GHSA-wph3-44rj-92pr
• advisories/GHSA-wph3-44rj-92pr

References

• CVE Record
• NVD entry