Ej2 Aspcore File Provider vulnerabilities
1 known vulnerability in Ej2 Aspcore File Provider from Syncfusion. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
Ej2 Aspcore File Provider: Improper Limitation of a Pathname to a Restricted Directory
The Syncfusion EJ2 ASPCore File Provider 3ac357f is vulnerable to Models/PhysicalFileProvider.cs directory traversal. As a result, an unauthenticated attacker can list files within a directory, download any file, or upload any file to any directory accessible