[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2018-9109":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":23,"technologies":74,"references":77,"score":83,"epss_score":84,"epss_percentile":85,"is_kev":86,"cisa_kev_date_added":87,"cisa_kev_due_date":87,"cisa_ssvc":88,"attack_mappings":94,"exploits":101},220057,"CVE-2018-9109","EUVD-2022-2311","elFinder Path Traversal vulnerability\n\nStudio 42 elFinder before 2.1.36 has a directory traversal vulnerability in `elFinder.class.php` with the `zipdl()` function that can allow a remote attacker to download files accessible by the web server process and delete files owned by the account running the web server process.","2022-05-13T01:06:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":19,"availabilityImpact":18,"privilegesRequired":18,"confidentialityImpact":17},"UNCHANGED","3.1",9.1,"NETWORK","CRITICAL","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N","HIGH","NONE","LOW",true,[22],"CWE-22",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73],"cpe:2.3:a:std42:elfinder:2.1.30:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.11:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.25:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.35:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.0.9:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.4:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.9:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.0:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.15:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:1.0.1:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.5:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.31:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.12:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.16:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.32:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.0.7:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.0.6:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:1.1:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.20:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.0.8:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.23:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.26:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.21:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.29:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.34:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.8:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.19:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.1:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:*:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.18:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.22:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.28:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.7:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.6:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.0:rc1:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.17:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.33:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:1.2:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.14:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.13:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.0:beta:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.27:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.10:*:*:*:*:*:*:*","cpe:2.3:a:std42:elfinder:2.1.24:*:*:*:*:*:*:*","cpe:2.3:a:studio-42:elfinder:*:*:*:*:*:*:*:*",[75,76],"Std42 Elfinder","Studio-42 Elfinder",[78,79,80,81,82],"https:\u002F\u002Fgithub.com\u002FStudio-42\u002FelFinder\u002Fcommit\u002F157f471d7e48f190f74e66eb5bc73360b5352fd3","https:\u002F\u002Fgithub.com\u002FStudio-42\u002FelFinder\u002Freleases\u002Ftag\u002F2.1.36","https:\u002F\u002Fgithub.com\u002FStudio-42\u002FelFinder\u002Fwiki\u002FAdvisory-about-vulnerability-of-CVE-2018-9109-and-CVE-2018-9110","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2018-9109","https:\u002F\u002Fgithub.com\u002FStudio-42\u002FelFinder",0.66,0.02944,0.87065,false,null,{"timestamp":87,"automatable":89,"tech_impact":90,"exploitation":91,"cisa_decision":92,"cisa_remediation_timeline":93},"no","partial","none",{},"FSU",[95],{"name":96,"source":97,"tactics":98,"technique_id":100},"Exploit Public-Facing Application","attack_vector",[99],"initial-access","T1190",[]]