VULNERABILITY INTELLIGENCE

CVE-2023-35840

CVSS score6.5 MEDIUM

EPSS probability1.94%

CISA KEVNot currently listed

Published2023-06-19

Last modified2026-06-17

Description

_joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector.