{"id":"CVE-2019-5884","published":"2019-01-10T06:00:00Z","modified":"2024-08-04T20:09:23Z","title":"php/elFinder.class.php in elFinder before 2.1.45 leaks information if PHP's curl extension is enabled and safe_mode or…","vendor":null,"product":null,"tier":"tail","description":{"text":"php/elFinder.class.php in elFinder before 2.1.45 leaks information if PHP's curl extension is enabled and safe_mode or open_basedir is not set.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.01275,"percentile":0.69841,"provenance":"source"},"cwes":[],"references":[{"url":"https://github.com/Studio-42/elFinder/releases/tag/2.1.45","tags":["x_refsource_MISC"]},{"url":"https://github.com/Studio-42/elFinder/commit/f133163f2d754584de65d718b2fde96191557316","tags":["x_refsource_MISC"]}],"priority":{"score":14.0,"factors":[{"name":"EPSS percentile","points":13.97}]},"affected":[{"ecosystem":"Packagist","package":"studio-42/elfinder","vulnerableRanges":["<2.1.45"],"patched":["2.1.45"],"from":["GHSA-jcgc-vxqg-85xx"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-4329","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-studio-42-elfinder-cve-2019-5884","children":[{"from":"CVE-2019-5884","to":"CVE-2021-32682","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["php/elFinder.class.php"],"commits":["https://github.com/Studio-42/elFinder/commit/f133163f2d754584de65d718b2fde96191557316","https://github.com/Studio-42/elFinder/commit/a106c350b7dfe666a81d6b576816db9fe0899b17"],"basis":"shared function","functions":["abort"]}]}],"packageHistory":[{"cve":"CVE-2018-9109","published":"2018-03-28","fixed":"2.1.36","kev":false},{"cve":"CVE-2018-9110","published":"2018-03-28","fixed":"2.1.37","kev":false,"link":{"from":"CVE-2018-9110","to":"CVE-2019-5884","relation":"successor","confidence":"high","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:studio-42/elfinder","fromFixed":"2.1.37","toFixed":"2.1.45","daysApart":288},{"kind":"same-code","provenance":"machine","files":["php/elFinder.class.php"],"commits":["https://github.com/Studio-42/elFinder/commit/e6351557b86cc10a7651253d2d2aff7f6b918f8e","https://github.com/Studio-42/elFinder/commit/f133163f2d754584de65d718b2fde96191557316"],"basis":"shared file"}]}},{"cve":"CVE-2019-5884","published":"2019-01-10","fixed":"2.1.45","kev":false},{"cve":"CVE-2019-9194","published":"2019-02-26","fixed":"2.1.48","kev":false,"link":{"from":"CVE-2019-5884","to":"CVE-2019-9194","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:studio-42/elfinder","fromFixed":"2.1.45","toFixed":"2.1.48","daysApart":47}]}},{"cve":"CVE-2019-6257","published":"2019-01-14","fixed":"2.1.49","kev":false},{"cve":"CVE-2021-23394","published":"2021-06-13","fixed":"2.1.58","kev":false}],"package":"Packagist:studio-42/elfinder"}}