CVE-2022-27115: STD42 Elfinder

Critical severity, CVSS 9.8. EPSS: 28.6% chance of exploitation in the next 30 days.

In Studio-42 elFinder 2.1.60, there is a vulnerability that causes remote code execution through file name bypass for file upload.

Affected products

• STD42 Elfinder: version 2.1.60 only

Published 2022-04-11. Last modified 2026-06-17.