elFinder < 2.1.62 Path Traversal Vulnerability (GHSA-wm5g-p99q-66g4)

elFinder is prone to a path traversal vulnerability in the PHP LocalVolumeDriver connector. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

CVE-2023-35840

joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector...