This affects all versions of package elFinder.NetCore. The ExtractAsync function within the FileSystem is vulnerable to arbitrary extraction due to insufficient validation.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: snyk
Published: 2021-09-01T14:30:17.562183Z
Updated: 2024-09-16T16:38:08.993Z
Reserved: 2021-01-08T00:00:00
Link: CVE-2021-23427
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2021-09-01T15:15:08.463
Modified: 2022-07-12T17:42:04.277
Link: CVE-2021-23427
Redhat
No data.