# Is elFinder Media library a potential security risk?
**URL:** https://forum.mautic.org/t/is-elfinder-media-library-a-potential-security-risk/20465
**Category:** General Discussion
**Tags:** discussion, development
**Created:** [August 12, 2021, 10:08pm UTC](https://forum.mautic.org/t/is-elfinder-media-library-a-potential-security-risk/20465 "2021-08-12T22:08:33Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@ericgr](https://forum.mautic.org/u/ericgr)
#### Post date: [August 12, 2021, 10:08pm UTC](https://forum.mautic.org/t/is-elfinder-media-library-a-potential-security-risk/20465/1 "2021-08-12T22:08:33Z")
Mautic 3.3.3 on ubuntu 20.4
I’m fooling around a bit with elFinder, the useful little media library that is, for some reason, hidden deep in the internals of email/landing page builder:
(It seems a little odd that all of the system images are in there, also, but that is for another post!)
In fooling around with it, I landed on the elFinder github repo and saw this warning:
I clicked on the “About elFinder” icon in the mautic version and see that we are running version 2.1.57:
Is this element something that we can upgrade or swap out for the updated version?
---
### Author:  [@sakrecoer](https://forum.mautic.org/u/sakrecoer)
#### Post date: [September 1, 2021, 5:49am UTC](https://forum.mautic.org/t/is-elfinder-media-library-a-potential-security-risk/20465/2 "2021-09-01T05:49:18Z")
Since elFinder is not publicly available (only available to your users) it should be fine. Unfortunately, this is only my semi-educated guess, and admittedly it worries me that your well put message with very legitimate concerns has been unanswered for 19 days…
---
### Author:  [@ericgr](https://forum.mautic.org/u/ericgr)
#### Post date: [September 1, 2021, 3:58pm UTC](https://forum.mautic.org/t/is-elfinder-media-library-a-potential-security-risk/20465/3 "2021-09-01T15:58:52Z")
Thanks, @sakrecoer. You are probably correct that it is fairly safe since it is not open to the world at large. And I agree - it is concerning that there are no replies. I’ve also tried to follow the documentation to understand more about elFinder, but so far I have not been able to find enough info to get started with it or really understand how it is implemented in Mautic. I’ve read through the GitHub files and their documentation (elFinder’s) but it definitely seems predicated on already knowing a good deal about the underlying technologies. I’m not quite there, yet…
---
### Author:  [@EJL](https://forum.mautic.org/u/EJL)
#### Post date: [September 1, 2021, 4:31pm UTC](https://forum.mautic.org/t/is-elfinder-media-library-a-potential-security-risk/20465/4 "2021-09-01T16:31:58Z")
> **[Build software better, together](https://github.com/mautic/mautic/security/policy)**
>
> GitHub is where people build software. More than 65 million people use GitHub to discover, fork, and contribute to over 200 million projects.
Perhaps report it here instead @ericgr
---
### Author:  [@sakrecoer](https://forum.mautic.org/u/sakrecoer)
#### Post date: [September 1, 2021, 7:39pm UTC](https://forum.mautic.org/t/is-elfinder-media-library-a-potential-security-risk/20465/5 "2021-09-01T19:39:12Z")
fyi, it appears mautic 4.0.0 is either running a newer version or another tool 🙂