CVE-2023-35840

Published June 19th, 2023

View on NVD ↗

CVSS v3

6.5

MEDIUM

CVSS v2

N/A

Affected

1

PROJECT

Description

_joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector.

Studio-42/elFinder

📁 Open-source file manager for web, written in JavaScript using jQuery and jQuery UI

GitHub

4.79K