Количество 2
Количество 2
CVE-2021-23428
больше 4 лет назад
This affects all versions of package elFinder.NetCore. The Path.Combine(...) method is used to create an absolute file path. Due to missing sanitation of the user input and a missing check of the generated path its possible to escape the Files directory via path traversal
CVSS3: 8.6
EPSS: Низкий
GHSA-9rjp-r58j-fxgq
больше 4 лет назад
Path traversal in elFinder.NetCore
CVSS3: 8.6
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-23428 This affects all versions of package elFinder.NetCore. The Path.Combine(...) method is used to create an absolute file path. Due to missing sanitation of the user input and a missing check of the generated path its possible to escape the Files directory via path traversal | CVSS3: 8.6 | 1% Низкий | больше 4 лет назад |
| GHSA-9rjp-r58j-fxgq Path traversal in elFinder.NetCore | CVSS3: 8.6 | 1% Низкий | больше 4 лет назад |
Уязвимостей на страницу
20