https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 17:15:31 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-206900 EUVD-2026-206900 https://cve.radiocsirt.org/vuln/euvd-2026-206900 https://cve.radiocsirt.org/vuln/fkie_cve-2023-35840 <p>_joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector.</p> <p>_joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-35840 https://cve.radiocsirt.org/vuln/ghsa-wm5g-p99q-66g4 <p><strong>Affected:</strong> Packagist: studio-42/elfinder</p> <p>### Impact Path Traversal vulnerability in PHP LocalVolumeDriver connector. This vulnerability can be exploited by allowing untrusted users to write to the local file system.</p> <p>This issue was caused by incomplete validity checking of the supplied request parameters. That problem has been fixed in elFinder Version 2.1.62.</p> <p>### Patches This vulnerability has been fixed in elFinder 2.1.62. Installation managers should update to the latest version as soon as possible.</p> <p>### Workarounds If you cannot update for some reason, you must stop using it or prohibit writing to untrusted users.</p> <p><strong>Affected:</strong> Packagist: studio-42/elfinder</p> <p>### Impact Path Traversal vulnerability in PHP LocalVolumeDriver connector. This vulnerability can be exploited by allowing untrusted users to write to the local file system.</p> <p>This issue was caused by incomplete validity checking of the supplied request parameters. That problem has been fixed in elFinder Version 2.1.62.</p> <p>### Patches This vulnerability has been fixed in elFinder 2.1.62. Installation managers should update to the latest version as soon as possible.</p> <p>### Workarounds If you cannot update for some reason, you must stop using it or prohibit writing to untrusted users.</p> https://cve.radiocsirt.org/vuln/ghsa-wm5g-p99q-66g4 https://cve.radiocsirt.org/vuln/gsd-2023-35840 gsd-2023-35840 https://cve.radiocsirt.org/vuln/gsd-2023-35840