CVE-2021-23415
Directory Traversal in elFinder.AspNet
Résumé
Directory Traversal in elFinder.AspNet
Description d'origine
La description telle que publiée par la source (souvent en anglais).
This affects the package elFinder.AspNet before 1.1.1.
The user-controlled file name is not properly sanitized before it is used to create a file system path.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
NuGet
elFinder.AspNet
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1"}]}]
Références
- advisory nvd.nist.gov
- package github.com
- web github.com
- web snyk.io