Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6378
HistoryMay 25, 2018 - 1:34 a.m.

Directory Traversal

2018-05-2501:34:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

EPSS

0.004

Percentile

74.7%

studio-42/elfinder is vulnerable to directory traversals. The application does not validate the file parameter of the zipdl() function in elFinder.class.php, allowing a malicious user to cause a directory traversal attack and may cause file deletion.

EPSS

0.004

Percentile

74.7%