Syncfusion vulnerabilities
We track 2 vulnerabilities in Syncfusion products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 12, 2023.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Syncfusion vulnerabilities
- 9.8 Critical severity
Ej2 Aspcore File Provider: Improper Limitation of a Pathname to a Restricted Directory
The Syncfusion EJ2 ASPCore File Provider 3ac357f is vulnerable to Models/PhysicalFileProvider.cs directory traversal. As a result, an unauthenticated attacker can list files within a directory, download any file, or upload any file to any directory accessible
- 9.8 Critical severity
Nodejs File System Provider: Improper Limitation of a Pathname to a Restricted Directory
The Syncfusion EJ2 Node File Provider 0102271 is vulnerable to filesystem-server.js directory traversal. As a result, an unauthenticated attacker can: - On Windows, list files in any directory, read any file, delete any file, upload any file to any directory a