Lucene search
+L

8 matches found

Github Security Blog
Github Security Blog
•added 2021/08/09 8:42 p.m.•76 views

Directory Traversal in elFinder.AspNet

This affects the package elFinder.AspNet before 1.1.1. The user-controlled file name is not properly sanitized before it is used to create a file system path...

7.5CVSS3.1AI score0.01732EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2021/08/09 8:42 p.m.•44 views

GHSA-PJXV-W3QJ-J8M3 Directory Traversal in elFinder.AspNet

This affects the package elFinder.AspNet before 1.1.1. The user-controlled file name is not properly sanitized before it is used to create a file system path...

7.5CVSS7.5AI score0.01732EPSS
SaveExploits1References4
NVD
NVD
•added 2021/07/28 4:15 p.m.•17 views

CVE-2021-23415

This affects the package elFinder.AspNet before 1.1.1. The user-controlled file name is not properly sanitized before it is used to create a file system path...

7.5CVSS0.01732EPSS
SaveExploits1References2
OSV
OSV
•added 2021/07/28 4:15 p.m.•21 views

CVE-2021-23415

This affects the package elFinder.AspNet before 1.1.1. The user-controlled file name is not properly sanitized before it is used to create a file system path...

7.5CVSS6.8AI score
SaveExploits0References2
Prion
Prion
•added 2021/07/28 4:15 p.m.•29 views

Path traversal

This affects the package elFinder.AspNet before 1.1.1. The user-controlled file name is not properly sanitized before it is used to create a file system path...

5CVSS7.5AI score0.01732EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2021/07/28 4:05 p.m.•106 views

CVE-2021-23415

CVE-2021-23415 affects elFinder.AspNet prior to 1.1.1. The user-controlled file name is not properly sanitized before it is used to create a file system path, enabling Directory Traversal. Remediation: upgrade elFinder.AspNet to version 1.1.1 or higher. In public disclosures, Snyk provides a PoC ...

7.5CVSS7.5AI score0.01732EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/07/28 4:05 p.m.•32 views

CVE-2021-23415 Directory Traversal

This affects the package elFinder.AspNet before 1.1.1. The user-controlled file name is not properly sanitized before it is used to create a file system path...

7.5CVSS7.7AI score0.01732EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/28 12:00 a.m.•4 views

CVE-2021-23415: Improper Limitation of a Pathname to a Restricted Directory

This affects the package elFinder.AspNet before 1.1.1. The user-controlled file name is not properly sanitized before it is used to create a file system path...

7.5CVSS5.8AI score0.01732EPSS
SaveExploits1References2
Rows per page
Query Builder