CVE-2021-23427: Elfinder.netcore Project Elfinder.netcore

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

This affects all versions of package elFinder.NetCore. The ExtractAsync function within the FileSystem is vulnerable to arbitrary extraction due to insufficient validation.

Affected products

• Elfinder.netcore Project Elfinder.netcore: any version

Published 2021-09-01. Last modified 2026-06-17.