CVE-2021-23415

Directory Traversal

High · published July 28, 2021

CVSS v3.1
7.5
EPSS
2%
Percentile
77.5
In the wild
Unconfirmed
What it is

This affects the package elFinder.AspNet before 1.1.1. The user-controlled file name is not properly sanitized before it is used to create a file system path.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O
CVSS v4.0
Not supplied
EPSS
0.01732 · 77.5th percentile
Published
2021-07-28T16:05Z
EPSS history
Timeline
  • 28 JUL 16:05Z
    Directory Traversal
    cvelistv5