8.6 High

CVE-2021-23427 This affects all versions of package elFinder.NetCore

Description

This affects all versions of package elFinder.NetCore. The ExtractAsync function within the FileSystem is vulnerable to arbitrary extraction due to insufficient validation.

Affected products and versions

Product	Affected versions	Fixed in
elFinder.NetCore	Versions not published

The 2 CVEs of elFinder.NetCore →

CVE-2021-23428 This affects all versions of package elFinder.NetCore 8.6 High

Do you use elFinder.NetCore?

Track this CVE Watch elFinder.NetCore Check my SBOMs

www.cveye.io/en/cve/CVE-2021-23427

Timeline

Published September 1, 2021
Last modified September 16, 2024

References

snyk.io snyk.io
github.com github.com

Track this CVE

CVE-2021-23427 This affects all versions of package elFinder.NetCore

Description

Affected products and versions

Other CVEs of elFinder.NetCore