Platform
php
Component
extplorer
Fixed in
2.1.15
CVE-2023-54335 is a critical Remote Code Execution (RCE) vulnerability discovered in eXtplorer, a PHP-based file management system. This flaw allows attackers to bypass authentication controls, effectively logging in without credentials. Successful exploitation enables the upload of malicious PHP files, granting attackers the ability to execute arbitrary commands on the server, potentially leading to complete system compromise. The vulnerability impacts versions 0.0.0 through 2.1.14, with a fix available in version 2.1.15.
The impact of CVE-2023-54335 is severe. An attacker who successfully exploits this vulnerability gains complete control over the server hosting the eXtplorer instance. This includes the ability to read, write, and execute files, install malware, steal sensitive data (database credentials, API keys, user information), and pivot to other systems on the network. The ease of authentication bypass significantly lowers the barrier to entry for attackers, making this a high-priority target. The ability to upload and execute PHP code directly on the server mirrors the impact of other critical web application vulnerabilities, allowing for persistent backdoors and long-term compromise. A successful attack could result in data breaches, denial of service, and reputational damage.
CVE-2023-54335 was publicly disclosed on 2026-01-13. The vulnerability's ease of exploitation and the potential for significant impact suggest a medium probability of exploitation. While no public proof-of-concept (PoC) code has been widely reported, the authentication bypass is straightforward to implement, increasing the likelihood of exploitation. Monitor security advisories and threat intelligence feeds for any indications of active exploitation campaigns.
Exploit Status
EPSS
0.43% (62% percentile)
CISA SSVC
CVSS Vector
The primary mitigation for CVE-2023-54335 is to immediately upgrade eXtplorer to version 2.1.15 or later. If upgrading is not immediately feasible, consider implementing temporary workarounds. Restrict file upload permissions within eXtplorer to prevent the execution of PHP files. Implement a Web Application Firewall (WAF) with rules to detect and block suspicious login attempts and file uploads. Carefully review eXtplorer's configuration to ensure it adheres to security best practices, including disabling unnecessary features and limiting user privileges. After upgrading, verify the fix by attempting a login without credentials; the login attempt should be rejected.
Update eXtplorer to version 2.1.15 or higher to fix the authentication bypass and remote code execution vulnerability. Ensure you clean any malicious files that may have been uploaded before the update. Review server logs for any suspicious activity.
Vulnerability analysis and critical alerts directly to your inbox.
CVE-2023-54335 is a critical RCE vulnerability in eXtplorer, allowing attackers to bypass authentication and execute commands on the server.
You are affected if you are using eXtplorer versions 0.0.0 through 2.1.14. Upgrade to 2.1.15 to mitigate the risk.
Upgrade eXtplorer to version 2.1.15. As a temporary workaround, restrict file upload permissions and implement a WAF.
While no widespread exploitation has been confirmed, the vulnerability's ease of exploitation suggests a medium probability of exploitation.
Refer to the eXtplorer project's website or security mailing list for the official advisory regarding CVE-2023-54335.
Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.