[MEDIUM] elFinder: CSRF in netmount allows forced FTP mounts and server-side FTP connections

PKSA-th2b-2jzf-hmp6 CVE-2026-81890 GHSA-9hjf-w35w-6vx2

Affected package: studio-42/elfinder

Affected version: <2.1.70

Reported by:
GitHub