CVE-2021-23427

NuGet/elFinder.NetCore CVE-2021-23427: critical 9.8

Imporoper path validation in elFinder.NetCore

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-wmpm-fq7r-jq56
• https://nvd.nist.gov/vuln/detail/CVE-2021-23427
• https://github.com/gordon-matt/elFinder.NetCore
• https://github.com/gordon-matt/elFinder.NetCore/blob/633da9a4d7d5c9baefd1730ee51bf7af54889600/elFinder.NetCore/Drivers/FileSystem/FileSystemDriver.cs#L226
• https://github.com/gordon-matt/elFinder.NetCore/blob/633da9a4d7d5c9baefd1730ee51bf7af54889600/elFinder.NetCore/Drivers/FileSystem/FileSystemDriver.cs%23L226
• https://snyk.io/vuln/SNYK-DOTNET-ELFINDERNETCORE-1567778

CVE-2021-23427 · published 2021-09-02T22:05:17Z · modified 2026-03-13T21:56:55.998354Z · JSON