CVE-2021-23407

2021-07-1417:15:07

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.8%

JSON

This affects the package elFinder.Net.Core from 0 and before 1.2.4. The user-controlled file name is not properly sanitized before it is used to create a file system path.

CPENameOperatorVersion
elfinder.net.coreeqall-1.2.3
elfinder.net.coreeqall-1.1.1
elfinder.net.coreeqall-1.2.2
elfinder.net.coreeqall-1.2.1
elfinder.net.coreeqall-1.2.0
elfinder.net.coreeqall-1.1.2

Name	Operator	Version
elfinder.net.core	eq	all-1.2.3
elfinder.net.core	eq	all-1.1.1
elfinder.net.core	eq	all-1.2.2
elfinder.net.core	eq	all-1.2.1
elfinder.net.core	eq	all-1.2.0
elfinder.net.core	eq	all-1.1.2