Security Advisory

CVE-2023-35840

6.5
MEDIUM

Vulnerability Description

_joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector.
Published Date June 19, 2023
Official Source NIST NVD Advisory