Vulners
Lucene search
2 matches found
CVE-2021-23428
This affects all versions of package elFinder.NetCore. The Path.Combine... method is used to create an absolute file path. Due to missing sanitation of the user input and a missing check of the generated path its possible to escape the Files directory via path traversal...
9.8CVSS0.0167EPSS
SaveExploits0References3
CVE-2021-23428 Directory Traversal
This affects all versions of package elFinder.NetCore. The Path.Combine... method is used to create an absolute file path. Due to missing sanitation of the user input and a missing check of the generated path its possible to escape the Files directory via path traversal...
8.6CVSS9.7AI score0.0167EPSS
SaveExploits0References3
20