WS-2023-0176 | Mend Vulnerability Database

Vulnerability DatabaseWS-2023-0176

WS-2023-0176

Published:May 20, 2026

Updated:May 20, 2026

Path Traversal vulnerability in PHP LocalVolumeDriver connector

Affected Packages

lionbridge.flexframe.webui (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

basdog22/laracms_nopublic (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

copona/copona (PHP):

Affected version(s) =dev-guest2checkout <dev-dependabot/composer/twig/twig-2.14.11

Fix Suggestion:

Update to version dev-dependabot/composer/twig/twig-2.14.11

offerel/storage (PHP):

Affected version(s) >=dev-dev <1.0.1

Fix Suggestion:

Update to version 1.0.1

nova-framework/cms (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

simple-mvc-framework/v2 (PHP):

Affected version(s) >=v3.67.0 <v3.78.24

Fix Suggestion:

Update to version v3.78.24

nova-framework/framework (PHP):

Affected version(s) =v4.0.0 <4.0.1

Fix Suggestion:

Update to version 4.0.1

serhatozles/yii2-elfinder (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

gekomod/files-admin-bundle (PHP):

Affected version(s) =1.0

Fix Suggestion:

Update to version no_fix

nova-framework/framework (PHP):

Affected version(s) =dev-master <v2.0-beta.1

Fix Suggestion:

Update to version v2.0-beta.1

playground/playground (PHP):

Affected version(s) >=1.1.1 <=2.2.0

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) >=3.0.78 <3.0.84

Fix Suggestion:

Update to version 3.0.84

bigbrush/yii2-big (PHP):

Affected version(s) =1.2.10

Fix Suggestion:

Update to version no_fix

whole/core (PHP):

Affected version(s) >=dev-localization <=1.1.3.2

Fix Suggestion:

Update to version no_fix

pkrs/pkrs-framework (PHP):

Affected version(s) >=0.1.5 <0.1.8

Fix Suggestion:

Update to version 0.1.8

genix/cms (PHP):

Affected version(s) >=dev-dependabot/composer/phpmailer/phpmailer-6.5.0 <=dev-dependabot/composer/guzzlehttp/psr7-1.8.5

Fix Suggestion:

Update to version no_fix

genix/cms (PHP):

Affected version(s) >=v0.0.7-alpha <v1.1.12.x-dev

Fix Suggestion:

Update to version v1.1.12.x-dev

gekomod/files-bundle (PHP):

Affected version(s) =dev-master <0.2

Fix Suggestion:

Update to version 0.2

semisalov/fix-cms-core (PHP):

Affected version(s) >=dev-dev-master <=dev-php8-dev-master

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) >=3.0.64 <3.0.76

Fix Suggestion:

Update to version 3.0.76

ttek/tk-base (PHP):

Affected version(s) >=3.0.50 <3.0.62

Fix Suggestion:

Update to version 3.0.62

rob006/yii-elfinder2 (PHP):

Affected version(s) >=1.0.2 <1.1.3

Fix Suggestion:

Update to version 1.1.3

silverkix/cms-bundle (PHP):

Affected version(s) >=dev-master <=dev-1.0.0-beta

Fix Suggestion:

Update to version no_fix

redkite-labs/redkite-cms (PHP):

Affected version(s) >=v1.1.3 <1.1.3.5

Fix Suggestion:

Update to version 1.1.3.5

maddoger/yii2-elfinder (PHP):

Affected version(s) =v1.1

Fix Suggestion:

Update to version no_fix

hgati/magento-1-page-builder-module (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

rob006/yii-elfinder2 (PHP):

Affected version(s) >=1.1.4 <1.1.6

Fix Suggestion:

Update to version 1.1.6

ttek/tk-base (PHP):

Affected version(s) >=3.0.30 <3.0.42

Fix Suggestion:

Update to version 3.0.42

playground/design (PHP):

Affected version(s) >=1.1.1 <1.2.1

Fix Suggestion:

Update to version 1.2.1

dirmax/zettaframework (PHP):

Affected version(s) >=v1.1.41 <v1.1.43

Fix Suggestion:

Update to version v1.1.43

uom/tk-base (PHP):

Affected version(s) >=3.4.18 <=3.4.26

Fix Suggestion:

Update to version no_fix

studio-42/elfinder (PHP):

Affected version(s) >=dev-2.1-src <2.1.41

Fix Suggestion:

Update to version 2.1.41

bigbrush/yii2-big (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

dirmax/zettaframework (PHP):

Affected version(s) >=v1.1.48 <=v1.1.55

Fix Suggestion:

Update to version no_fix

imagecms/imagecms (PHP):

Affected version(s) >=v4.4 <v4.9

Fix Suggestion:

Update to version v4.9

phpffcms/ffcms-elfinder (PHP):

Affected version(s) >=dev-master <=1.0.0

Fix Suggestion:

Update to version no_fix

rob006/yii-elfinder2 (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

alxishin/elfinder (PHP):

Affected version(s) >=dev-master <=2.1.59.1

Fix Suggestion:

Update to version no_fix

wufeifei/grw (PHP):

Affected version(s) >=dev-developer <=dev-pr/29

Fix Suggestion:

Update to version no_fix

uom/tk-base (PHP):

Affected version(s) =1.0.138 <1.0.140

Fix Suggestion:

Update to version 1.0.140

adfab/core (PHP):

Affected version(s) >=dev-master <0.3.2

Fix Suggestion:

Update to version 0.3.2

ttek/tk-base (PHP):

Affected version(s) >=3.0.86 <3.0.98

Fix Suggestion:

Update to version 3.0.98

ttek/tk-base (PHP):

Affected version(s) >=3.2.72 <3.2.96

Fix Suggestion:

Update to version 3.2.96

ci4-cms-erp/ci4ms (PHP):

Affected version(s) >=dev-breadcrumbs <dev-master

Fix Suggestion:

Update to version dev-master

ttek/tk-base (PHP):

Affected version(s) =3.2.102 <3.2.104

Fix Suggestion:

Update to version 3.2.104

a70838697/yii2elfinder (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) >=3.0.100 <3.2.64

Fix Suggestion:

Update to version 3.2.64

yukisaw/elfinder (PHP):

Affected version(s) >=dev-filesize <=2.2.2

Fix Suggestion:

Update to version no_fix

skcms/admin-bundle (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

redkite-labs/redkite-labs-elfinder-bundle (PHP):

Affected version(s) =v1.1.3.2 <1.1.3.5

Fix Suggestion:

Update to version 1.1.3.5

adfab/core (PHP):

Affected version(s) >=0.3.5 <=0.3.19

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) >=1.0.52 <1.0.156

Fix Suggestion:

Update to version 1.0.156

basdog22/laracms (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

nickbur/sunrisecms (PHP):

Affected version(s) =v1.0.0

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) >=3.2.142 <8.0.0

Fix Suggestion:

Update to version 8.0.0

herurahmat/rimbun (PHP):

Affected version(s) >=1.0.2 <=1.0.3

Fix Suggestion:

Update to version no_fix

alphalemon/elfinder-bundle (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

nova-framework/novacms (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

research-nk/rnk-elfinder-bundle (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

keltanas/site-forever-cms (PHP):

Affected version(s) =0.4.1.x-dev <0.5.x-dev

Fix Suggestion:

Update to version 0.5.x-dev

ttek/tk-base (PHP):

Affected version(s) >=3.0.12 <3.0.24

Fix Suggestion:

Update to version 3.0.24

dirmax/zettaframework (PHP):

Affected version(s) >=v1.1.44 <v1.1.46

Fix Suggestion:

Update to version v1.1.46

ttek/tk-base (PHP):

Affected version(s) =3.2.106 <3.2.108

Fix Suggestion:

Update to version 3.2.108

recca0120/elfinder (PHP):

Affected version(s) =v1.1 <v1.1.1

Fix Suggestion:

Update to version v1.1.1

helios-ag/fm-elfinder (PHP):

Affected version(s) >=dev-master <1.0.1

Fix Suggestion:

Update to version 1.0.1

gekomod/files-bundle (PHP):

Affected version(s) >=1.1.0 <=1.1.1

Fix Suggestion:

Update to version no_fix

nao-pon/elfinder-nightly (PHP):

Affected version(s) =2.0.x-dev <dev-2.0_n

Fix Suggestion:

Update to version dev-2.0_n

redkite-labs/redkite-labs-elfinder-bundle (PHP):

Affected version(s) =v1.1.0 <v1.1.3

Fix Suggestion:

Update to version v1.1.3

simple-mvc-framework/v2 (PHP):

Affected version(s) =dev-master <v2.0-beta.1

Fix Suggestion:

Update to version v2.0-beta.1

ttek/tk-base (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

copona/copona (PHP):

Affected version(s) =dev-media-manager <dev-newcart

Fix Suggestion:

Update to version dev-newcart

studio-42/elfinder (PHP):

Affected version(s) >=2.0-beta <2.1.x-dev

Fix Suggestion:

Update to version 2.1.x-dev

tugumuda/helpers (PHP):

Affected version(s) >=dev-master <=5.4.x-dev

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) =3.0.x-dev <3.0.2

Fix Suggestion:

Update to version 3.0.2

offerel/storage (PHP):

Affected version(s) >=1.2.2 <=1.4.5

Fix Suggestion:

Update to version no_fix

simple-mvc-framework/v2 (PHP):

Affected version(s) =v4.0.0 <4.0.1

Fix Suggestion:

Update to version 4.0.1

mofei/oneone (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

wtolk/adfm-elfinder (PHP):

Affected version(s) =dev-tinymce-elfinder

Fix Suggestion:

Update to version no_fix

uom/tk-base (PHP):

Affected version(s) >=3.4.6 <3.4.16

Fix Suggestion:

Update to version 3.4.16

maddoger/yii2-elfinder (PHP):

Affected version(s) =dev-master <v.1.0.0

Fix Suggestion:

Update to version v.1.0.0

bigbrush/yii2-big (PHP):

Affected version(s) >=1.1.0 <1.2.9

Fix Suggestion:

Update to version 1.2.9

genix/cms (PHP):

Affected version(s) >=dev-dependabot/composer/studio-42/elfinder-2.1.59 <v0.0.1

Fix Suggestion:

Update to version v0.0.1

nickbur/divinecms (PHP):

Affected version(s) =v1.0.0

Fix Suggestion:

Update to version no_fix

nova-framework/framework (PHP):

Affected version(s) >=v3.67.0 <v3.78.24

Fix Suggestion:

Update to version v3.78.24

copona/copona (PHP):

Affected version(s) =dev-EV-code-refactoring <dev-checkout_new

Fix Suggestion:

Update to version dev-checkout_new

runcmf/runbb-ext-markitup (PHP):

Affected version(s) >=dev-master <=0.1.0

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) =3.2.110 <3.2.112

Fix Suggestion:

Update to version 3.2.112

romjkeeeen/fix-cms-core1 (PHP):

Affected version(s) >=dev-dev-master <=dev-php8-dev-master

Fix Suggestion:

Update to version no_fix

studio-42/elfinder (PHP):

Affected version(s) >=dev-master <1.0.1

Fix Suggestion:

Update to version 1.0.1

copona/copona (PHP):

Affected version(s) >=dev-orm-eloquent <dev-pdf

Fix Suggestion:

Update to version dev-pdf

herurahmat/rimbunci3 (PHP):

Affected version(s) >=1.0.1 <=1.0.3

Fix Suggestion:

Update to version no_fix

studio-42/elfinder (PHP):

Affected version(s) >=2.1.50 <2.1.60

Fix Suggestion:

Update to version 2.1.60

redkite-labs/redkite-labs-elfinder-bundle (PHP):

Affected version(s) =1.1.0-beta <1.1.x-dev

Fix Suggestion:

Update to version 1.1.x-dev

ttek/tk-base (PHP):

Affected version(s) >=3.2.128 <3.2.136

Fix Suggestion:

Update to version 3.2.136

dirmax/zettaframework (PHP):

Affected version(s) >=v0.1 <v1.0

Fix Suggestion:

Update to version v1.0

rob006/yii-elfinder2 (PHP):

Affected version(s) =1.0.x-dev <1.0.1

Fix Suggestion:

Update to version 1.0.1

laraflat/laraflat (PHP):

Affected version(s) >=dev-dev <=3.0.0

Fix Suggestion:

Update to version no_fix

ecnet/admin (PHP):

Affected version(s) =dev-master <1.0

Fix Suggestion:

Update to version 1.0

components/elfinder (PHP):

Affected version(s) =2.2 <3.0-alpha

Fix Suggestion:

Update to version 3.0-alpha

ttek/tk-base (PHP):

Affected version(s) >=dev-ver1 <1.0.50

Fix Suggestion:

Update to version 1.0.50

gyman/supr (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

siteforever/site-forever-cms (PHP):

Affected version(s) =0.4.1.x-dev <0.5.x-dev

Fix Suggestion:

Update to version 0.5.x-dev

ci4-cms-erp/ci4ms (PHP):

Affected version(s) =dev-searchpage <0.21.0

Fix Suggestion:

Update to version 0.21.0

Related Resources (1)

https://github.com/Studio-42/elFinder/commit/bb9aaa7b096a1b83f2f85657c43f12131ece2891

Do you need more information?

CVSS v4

Base Score:

8.7

Attack Vector

NETWORK

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

NONE

User Interaction

NONE

Vulnerable System Confidentiality

HIGH

Vulnerable System Integrity

NONE

Vulnerable System Availability

NONE

Subsequent System Confidentiality

NONE

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE