Security Advisory

CVE-2023-35840

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-06-19 00:00:00

Last updated 2024-12-11 20:06:00

Assigner mitre

State PUBLISHED

_joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector.