Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-35840
6.5
MEDIUMCVSS v3
Published
June 19, 2023
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
_joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector.
Studio-42/elFinder
GitHub📁 Open-source file manager for web, written in JavaScript using jQuery and jQuery UI
GitHub📁 Open-source file manager for web, written in JavaScript using jQuery and jQuery UI< 2.1.62NVD