CVE-2021-23415

CVE-2021-23415 affects elFinder.AspNet prior to 1.1.1. The user-controlled file name is not properly sanitized before it is used to create a file system path, enabling Directory Traversal. Remediation: upgrade elFinder.AspNet to version 1.1.1 or higher. In public disclosures, Snyk provides a PoC ...