Skip to content
OpenAdvisories
High · 7.5 CVE-2021-23415 EUVD-2021-1820GHSA-pjxv-w3qj-j8m3SNYK-DOTNET-ELFINDERASPNET-1315153

Directory Traversal

Published Jul 28, 2021 · Updated Sep 16, 2024 · Assigned by snyk

Description

This affects the package elFinder.AspNet before 1.1.1. The user-controlled file name is not properly sanitized before it is used to create a file system path.

Affected products

VendorProductAffectedFixed
— elFinder.AspNet unspecified – < 1.1.1 1.1.1

Affected packages

EcosystemPackageAffectedFixedRecord
NuGet elFinder.AspNet < 1.1.1 1.1.1 GHSA-pjxv-w3qj-j8m3

References