cve/2021/CVE-2021-23407.md
2025-09-29 21:09:30 +02:00

778 B

CVE-2021-23407

Description

This affects the package elFinder.Net.Core from 0 and before 1.2.4. The user-controlled file name is not properly sanitized before it is used to create a file system path.

POC

Reference

Github

No PoCs found on GitHub currently.