CVE-2021-23407: Elfinder.net.core Project Elfinder.net.core

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

This affects the package elFinder.Net.Core from 0 and before 1.2.4. The user-controlled file name is not properly sanitized before it is used to create a file system path.

Affected products

• Elfinder.net.core Project Elfinder.net.core: before 1.2.4 (fixed in 1.2.4)

Published 2021-07-14. Last modified 2026-06-17.