Lucene search
Veracode Vulnerability DatabaseVERACODE:31972HistorySep 06, 2021 - 6:35 a.m.
Path Traversal
2021-09-0606:35:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
elfinder.netcore
path traversal
user-provided data
malicious characters
files
directories
EPSS
0.003
Percentile
69.3%
elfinder.netcore is vulnerable to path traversal. Lack of sanitization of user-provided data to the Path.Combine(…) method allows attacker to input malicious characters to access files and directories outside the destination folder.
References
github.com/gordon-matt/elFinder.NetCore
github.com/gordon-matt/elFinder.NetCore/blob/633da9a4d7d5c9baefd1730ee51bf7af54889600/elFinder.NetCore/Drivers/FileSystem/FileSystemDriver.cs#L387
github.com/gordon-matt/elFinder.NetCore/blob/633da9a4d7d5c9baefd1730ee51bf7af54889600/elFinder.NetCore/Drivers/FileSystem/FileSystemDriver.cs%23L387
Related
osv
osv
Path traversal in elFinder.NetCore
2021-09-02 22:05:26
nvd
nvd
CVE-2021-23428
2021-09-01 15:15:08
cvelist
cvelist
CVE-2021-23428 Directory Traversal
2021-09-01 14:30:12
prion
prion
Path traversal
2021-09-01 15:15:00
github
github
Path traversal in elFinder.NetCore
2021-09-02 22:05:26
cve
cve
CVE-2021-23428
2021-09-01 15:15:08