PT-2021-15516 · Unknown · Elfinder.Netcore

Timo Müller · Published 2021-09-01 · Updated 2021-09-09 · CVE-2021-23428

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions elFinder.NetCore (affected versions not specified)

Description The issue arises from the use of the Path.Combine(...) method to create an absolute file path without proper sanitation of user input and a check on the generated path. This allows for a path traversal attack, enabling an attacker to escape the Files directory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Path traversal

Weakness Enumeration

CWE-20

CWE-22

Related Identifiers

CVE-2021-23428

GHSA-9RJP-R58J-FXGQ

SNYK-DOTNET-ELFINDERNETCORE-1313838

Affected Products

Elfinder.Netcore

References · 7

• https://osv.dev/vulnerability/GHSA-9rjp-r58j-fxgq · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-23428 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-23428 · Security Note
• https://github.com/gordon-matt/elFinder.NetCore/blob/633da9a4d7d5c9baefd1730ee51bf7af54889600/elFinder.NetCore/Drivers/FileSystem/FileSystemDriver.cs%23L387 · Note
• https://github.com/gordon-matt/elFinder.NetCore · Note
• https://github.com/gordon-matt/elFinder.NetCore/blob/633da9a4d7d5c9baefd1730ee51bf7af54889600/elFinder.NetCore/Drivers/FileSystem/FileSystemDriver.cs#L387 · Note
• https://snyk.io/vuln/SNYK-DOTNET-ELFINDERNETCORE-1313838 · Note