CVE-2021-23415: Elfinder.aspnet Project Elfinder.aspnet

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

This affects the package elFinder.AspNet before 1.1.1. The user-controlled file name is not properly sanitized before it is used to create a file system path.

Affected products

• Elfinder.aspnet Project Elfinder.aspnet: before 1.1.1 (fixed in 1.1.1)

Published 2021-07-28. Last modified 2026-06-17.