References https://security.snyk.io/vuln/SNYK-PHP-STUDIO42ELFINDER-2615248 https://avd.aquasec.com/nvd/2022/cve-2022-27115/ https://github.com/Studio-42/elFinder/issues/3458 https://cve.circl.lu/search?vendor=std42&product=elfinder https://test.osv.dev/vulnerability/GHSA-6p96-vfrc-fv32 https://github.com/advisories/GHSA-6p96-vfrc-fv32 https://www.fortiguard.com/encyclopedia/ips/51490 https://www.cve.org/CVERecord?id=CVE-2022-27115 https://www.cvedetails.com/vulnerability-list/vendor_id-22704/product_id-80102/Std42-Elfinder.html https://app.opencve.io/cve/CVE-2022-27115
Related Vulnerabilities时空智友ERP系统 /formservice updater.uploadStudioFile 文件上传漏洞PoCCVE-2025-25296: Label Studio < 1.16.0 - Cross-Site ScriptingPoCCVE-2025-47783: Label Studio < 1.18.0 - Reflected XSSLabel Studio存在XSS漏洞(CVE-2025-25296)PoCsupabase-studio-exposure: Supabase Studio - ExposurePoCCVE-2024-14015: Studiocart <= 2.9.0 - Cross-Site ScriptingPoCvscode-settings: Visual Studio Code Settings - Credential ExposurePoCvscode-mcp-json: Visual Studio Code MCP Configuration ("mcp.json") ExposurePoCvscode-slnx-sqlite-disclosure: Visual Studio Code - Slnx.SQLite File DisclosurePoCCVE-2021-23394: elFinder < 2.1.58 - Remote Code ExecutionCherry Studio 未授权 代码注入漏洞Sim Studio AI 服务端请求伪造漏洞(CVE-2025-9805)