{"id":"CVE-2019-6257","published":"2019-01-14T07:00:00Z","modified":"2024-09-16T16:42:44Z","title":"A Server Side Request Forgery (SSRF) vulnerability in elFinder before 2.1.46 could allow a malicious user to access…","vendor":null,"product":null,"tier":"tail","description":{"text":"A Server Side Request Forgery (SSRF) vulnerability in elFinder before 2.1.46 could allow a malicious user to access the content of internal network resources. This occurs in get_remote_contents() in php/elFinder.class.php.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.01098,"percentile":0.65408,"provenance":"source"},"cwes":[],"references":[{"url":"https://github.com/Studio-42/elFinder/blob/68ec63c0aeca3963101aca8f842dc9f2e4c4c6d3/Changelog","tags":["x_refsource_MISC"]},{"url":"https://github.com/Studio-42/elFinder/commit/2f522db8f037a66ce9040ee0b216aa4a0359286c","tags":["x_refsource_MISC"]}],"priority":{"score":13.1,"factors":[{"name":"EPSS percentile","points":13.08}]},"affected":[{"ecosystem":"Packagist","package":"studio-42/elfinder","vulnerableRanges":["<2.1.49"],"patched":["2.1.49"],"from":["GHSA-3qhm-qfj3-4rrx"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-2234","exploited":false,"provenance":"source"}}