Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 12/07/2023 Updated: 26/07/2023

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 0

The Syncfusion EJ2 ASPCore File Provider 3ac357f is vulnerable to Models/PhysicalFileProvider.cs directory traversal. As a result, an unauthenticated attacker can list files within a directory, download any file, or upload any file to any directory accessible by the web server.

Vulnerable Product	Search on Vulmon	Subscribe to Product
syncfusion ej2 aspcore file provider -

CVE-2023-26563 - Local File Read in ASPCore Filemanager Affected repository: githubcom/SyncfusionExamples/ej2-aspcore-file-provider/ Vulnerable versions before Git commit 7c8791084ff86d4a2c225756c490591f6e011a6c The application fails to verify any of the paths provided by the user As a result, it's possible to specify directory traversal sequences ("/"

CWE-22 https://github.com/SyncfusionExamples/ej2-aspcore-file-provider https://ej2.syncfusion.com/documentation/file-manager/file-system-provider/https://github.com/RupturaInfoSec/CVE-2023-26563-26564-26565/https://nvd.nist.gov https://github.com/RupturaInfoSec/CVE-2023-26563-26564-26565

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-26564

Vulnerability Summary

Github Repositories

References

Vulmon Search

About

Products

Connect