Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2021-23428

Directory Traversal

This affects all versions of package elFinder.NetCore. The Path.Combine(...) method is used to create an absolute file path. Due to missing sanitation of the user input and a missing check of the generated path its possible to escape the Files directory via path traversal

CVSS 3.1 · 8.6 High EPSS 1.7% KEV · Not listed
Vendors
Elfinder.netcore Project
Products
Elfinder.netcore
CVE-2021-23427

Arbitrary File Write via Archive Extraction (Zip Slip)

This affects all versions of package elFinder.NetCore. The ExtractAsync function within the FileSystem is vulnerable to arbitrary extraction due to insufficient validation.

CVSS 3.1 · 8.6 High EPSS 1.4% KEV · Not listed
Vendors
Elfinder.netcore Project
Products
Elfinder.netcore