Vulnerabilities > CVE-2019-6257 - Server-Side Request Forgery (SSRF) vulnerability in Std42 Elfinder

CVSS 7.7 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

std42

CWE-918

NVD

Published: 2019-01-14

Updated: 2024-11-21

Summary

A Server Side Request Forgery (SSRF) vulnerability in elFinder before 2.1.46 could allow a malicious user to access the content of internal network resources. This occurs in get_remote_contents() in php/elFinder.class.php.

Vulnerable Configurations

Part	Description	Count
Application	Std42 Std42 Elfinder 1.0.1 Std42 Elfinder 1.1 Std42 Elfinder 1.2 Std42 Elfinder 2.0 Std42 Elfinder 2.0.3 Std42 Elfinder 2.0.4 Std42 Elfinder 2.0.5 Std42 Elfinder 2.0.6 Std42 Elfinder 2.0.7 Std42 Elfinder 2.0.8 Std42 Elfinder 2.0.9 Std42 Elfinder 2.1.0 Std42 Elfinder 2.1.1 Std42 Elfinder 2.1.2 Std42 Elfinder 2.1.3 Std42 Elfinder 2.1.4 Std42 Elfinder 2.1.5 Std42 Elfinder 2.1.6 Std42 Elfinder 2.1.7 Std42 Elfinder 2.1.8 Std42 Elfinder 2.1.9 Std42 Elfinder 2.1.10 Std42 Elfinder 2.1.11 Std42 Elfinder 2.1.12 Std42 Elfinder 2.1.13 Std42 Elfinder 2.1.14 Std42 Elfinder 2.1.15 Std42 Elfinder 2.1.16 Std42 Elfinder 2.1.17 Std42 Elfinder 2.1.18 Std42 Elfinder 2.1.19 Std42 Elfinder 2.1.20 Std42 Elfinder 2.1.21 Std42 Elfinder 2.1.22 Std42 Elfinder 2.1.23 Std42 Elfinder 2.1.24 Std42 Elfinder 2.1.25 Std42 Elfinder 2.1.26 Std42 Elfinder 2.1.27 Std42 Elfinder 2.1.28 Std42 Elfinder 2.1.29 Std42 Elfinder 2.1.30 Std42 Elfinder 2.1.31 Std42 Elfinder 2.1.32 Std42 Elfinder 2.1.33 Std42 Elfinder 2.1.34 Std42 Elfinder 2.1.35 Std42 Elfinder 2.1.36 Std42 Elfinder 2.1.37 Std42 Elfinder 2.1.38 Std42 Elfinder 2.1.39 Std42 Elfinder 2.1.40 Std42 Elfinder 2.1.41 Std42 Elfinder 2.1.42 Std42 Elfinder 2.1.43 Std42 Elfinder 2.1.44 Std42 Elfinder 2.1.45	58

Common Weakness Enumeration (CWE)

CWE-918 - Server-Side Request Forgery (SSRF)

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References