Elfinder.netcore Project Elfinder.netcore
2 CVEs affecting Elfinder.netcore Project Elfinder.netcore. Latest disclosed: 2021-09-01. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-23428 | High | 8.6 | 2021-09-01 | This affects all versions of package elFinder.NetCore. The Path.Combine(...) method is used to create an absolute file path. Due to missing sanitation of the u… |
CVE-2021-23427 | High | 8.6 | 2021-09-01 | This affects all versions of package elFinder.NetCore. The ExtractAsync function within the FileSystem is vulnerable to arbitrary extraction due to insufficien… |