CVE-2023-35840

Publication date

2023-06-19 00:00:00

Family

mitre

State

PUBLISHED

Description

_joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector.