CVE-2023-35840

_joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector.

CVSS v3.1 NVD

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CVSS v3.1 GitHub

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

1.94% chance of exploitation in the next 30 days, 80th percentile

Published

2023-06-19

Updated

2024-12-11

Proof-of-concept exploits (1)

• afine-com/CVE-2023-358402★ · 2023-06-22

Security advisories

• Studio-42/elFinder/commit/bb9aaa7b096a1b83f2f85657c43f12131ece2891
• Studio-42/elFinder/security/advisories/GHSA-wm5g-p99q-66g4
• sectroyer/CVEs/tree/main/CVE-2023-35840
• advisories/GHSA-wm5g-p99q-66g4

References

• CVE Record
• NVD entry

Related

• CVE-2018-25031
• CVE-2022-35501
• CVE-2022-36433
• CVE-2023-39062
• CVE-2023-45182
• CVE-2023-45184