Path Traversal in elFinder.Net.Core

2021-08-0217:30:27

Google

osv.dev

0.002 Low

EPSS

Percentile

57.8%

JSON

This affects the package elFinder.Net.Core from 0 and before 1.2.4. The user-controlled file name is not properly sanitized before it is used to create a file system path.

CPENameOperatorVersion
elfinder.net.coreeq1.2.2
elfinder.net.coreeq1.0.1
elfinder.net.coreeq1.2.0
elfinder.net.coreeq1.0.2
elfinder.net.coreeq1.1.1
elfinder.net.coreeq1.2.3
elfinder.net.coreeq1.0.3
elfinder.net.coreeq1.2.1
elfinder.net.coreeq1.1.2
elfinder.net.coreeq1.0.0

Name	Operator	Version
elfinder.net.core	eq	1.2.2
elfinder.net.core	eq	1.0.1
elfinder.net.core	eq	1.2.0
elfinder.net.core	eq	1.0.2
elfinder.net.core	eq	1.1.1
elfinder.net.core	eq	1.2.3
elfinder.net.core	eq	1.0.3
elfinder.net.core	eq	1.2.1
elfinder.net.core	eq	1.1.2
elfinder.net.core	eq	1.0.0