CVE-2021-23407

Publication date

2021-07-14 16:40:11

Family

snyk

State

PUBLISHED

Description

This affects the package elFinder.Net.Core from 0 and before 1.2.4. The user-controlled file name is not properly sanitized before it is used to create a file system path.