← Back to CVE List
CVE-2021-23427
This affects all versions of package elFinder.NetCore. The ExtractAsync function within the FileSystem is vulnerable to arbitrary extraction due to insufficient validation.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt