4
CVSSv2

CVE-2019-6257

Published: 14/01/2019 Updated: 09/09/2021
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 7.7 | Impact Score: 4 | Exploitability Score: 3.1
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Vulnerability Summary

A Server Side Request Forgery (SSRF) vulnerability in elFinder prior to 2.1.46 could allow a malicious user to access the content of internal network resources. This occurs in get_remote_contents() in php/elFinder.class.php.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

std42 elfinder