← Back

Ej2 Aspcore File Provider

ej2_aspcore_file_provider

Vendor: Syncfusion • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-26564
1Syncfusion
1Ej2 Aspcore File Provider
Jun 17, 2026
Jul 12, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The Syncfusion EJ2 ASPCore File Provider 3ac357f is vulnerable to Models/PhysicalFileProvider.cs directory traversal. As a result, an unauthenticated attacker can list files within a directory, download any file, or uplo...Show more
The Syncfusion EJ2 ASPCore File Provider 3ac357f is vulnerable to Models/PhysicalFileProvider.cs directory traversal. As a result, an unauthenticated attacker can list files within a directory, download any file, or upload any file to any directory accessible by the web server.Show less