CVE-2023-35840
1 advisory.
Packagist/studio-42/elfinder CVE-2023-35840: high 7.5, EPSS 1.94%
elFinder vulnerable to path traversal in LocalVolumeDriver connector
Action: Upgrade studio-42/elfinder to 2.1.62 or later.
composer require studio-42/elfinder:2.1.62Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.62 | - |
Fixed versions
| 2.1.62 |
Sources
- osv: GHSA-wm5g-p99q-66g4
- https://github.com/Studio-42/elFinder/security/advisories/GHSA-wm5g-p99q-66g4
- https://github.com/Studio-42/elFinder/commit/bb9aaa7b096a1b83f2f85657c43f12131ece2891
- https://github.com/Studio-42/elFinder
CVE-2023-35840 · published · modified · JSON