Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2021-23427

Arbitrary File Write via Archive Extraction (Zip Slip)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
snyk

Description

This affects all versions of package elFinder.NetCore. The ExtractAsync function within the FileSystem is vulnerable to arbitrary extraction due to insufficient validation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a elFinder.NetCore

  • 0 to < unspecifiedaffected

References