WS-2023-0176 | Mend Vulnerability Database

Vulnerability DatabaseWS-2023-0176

WS-2023-0176

Published:May 20, 2026

Updated:May 20, 2026

Path Traversal vulnerability in PHP LocalVolumeDriver connector

Affected Packages

lionbridge.flexframe.webui (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

yukisaw/elfinder (PHP):

Affected version(s) >=dev-filesize <=2.2.2

Fix Suggestion:

Update to version no_fix

mofei/oneone (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

redkite-labs/redkite-cms (PHP):

Affected version(s) >=v1.1.3 <1.1.3.5

Fix Suggestion:

Update to version 1.1.3.5

bigbrush/yii2-big (PHP):

Affected version(s) =1.2.10

Fix Suggestion:

Update to version no_fix

nickbur/divinecms (PHP):

Affected version(s) =v1.0.0

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) >=3.0.12 <3.0.24

Fix Suggestion:

Update to version 3.0.24

nova-framework/framework (PHP):

Affected version(s) >=v3.67.0 <v3.78.24

Fix Suggestion:

Update to version v3.78.24

adfab/core (PHP):

Affected version(s) >=dev-master <0.3.2

Fix Suggestion:

Update to version 0.3.2

copona/copona (PHP):

Affected version(s) >=dev-orm-eloquent <dev-pdf

Fix Suggestion:

Update to version dev-pdf

ttek/tk-base (PHP):

Affected version(s) >=1.0.52 <1.0.156

Fix Suggestion:

Update to version 1.0.156

wufeifei/grw (PHP):

Affected version(s) >=dev-developer <=dev-pr/29

Fix Suggestion:

Update to version no_fix

studio-42/elfinder (PHP):

Affected version(s) >=dev-master <1.0.1

Fix Suggestion:

Update to version 1.0.1

hgati/magento-1-page-builder-module (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

helios-ag/fm-elfinder (PHP):

Affected version(s) >=dev-master <1.0.1

Fix Suggestion:

Update to version 1.0.1

simple-mvc-framework/v2 (PHP):

Affected version(s) =v4.0.0 <4.0.1

Fix Suggestion:

Update to version 4.0.1

gekomod/files-bundle (PHP):

Affected version(s) =dev-master <0.2

Fix Suggestion:

Update to version 0.2

gyman/supr (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

nova-framework/framework (PHP):

Affected version(s) =dev-master <v2.0-beta.1

Fix Suggestion:

Update to version v2.0-beta.1

redkite-labs/redkite-labs-elfinder-bundle (PHP):

Affected version(s) =v1.1.0 <v1.1.3

Fix Suggestion:

Update to version v1.1.3

uom/tk-base (PHP):

Affected version(s) >=3.4.18 <=3.4.26

Fix Suggestion:

Update to version no_fix

a70838697/yii2elfinder (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

ecnet/admin (PHP):

Affected version(s) =dev-master <1.0

Fix Suggestion:

Update to version 1.0

ttek/tk-base (PHP):

Affected version(s) >=3.0.86 <3.0.98

Fix Suggestion:

Update to version 3.0.98

offerel/storage (PHP):

Affected version(s) >=dev-dev <1.0.1

Fix Suggestion:

Update to version 1.0.1

rob006/yii-elfinder2 (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

dirmax/zettaframework (PHP):

Affected version(s) >=v0.1 <v1.0

Fix Suggestion:

Update to version v1.0

redkite-labs/redkite-labs-elfinder-bundle (PHP):

Affected version(s) =1.1.0-beta <1.1.x-dev

Fix Suggestion:

Update to version 1.1.x-dev

genix/cms (PHP):

Affected version(s) >=dev-dependabot/composer/phpmailer/phpmailer-6.5.0 <=dev-dependabot/composer/guzzlehttp/psr7-1.8.5

Fix Suggestion:

Update to version no_fix

nova-framework/framework (PHP):

Affected version(s) =v4.0.0 <4.0.1

Fix Suggestion:

Update to version 4.0.1

maddoger/yii2-elfinder (PHP):

Affected version(s) =v1.1

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) >=3.0.78 <3.0.84

Fix Suggestion:

Update to version 3.0.84

ttek/tk-base (PHP):

Affected version(s) =3.2.110 <3.2.112

Fix Suggestion:

Update to version 3.2.112

siteforever/site-forever-cms (PHP):

Affected version(s) =0.4.1.x-dev <0.5.x-dev

Fix Suggestion:

Update to version 0.5.x-dev

basdog22/laracms_nopublic (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) >=3.2.142 <8.0.0

Fix Suggestion:

Update to version 8.0.0

romjkeeeen/fix-cms-core1 (PHP):

Affected version(s) >=dev-dev-master <=dev-php8-dev-master

Fix Suggestion:

Update to version no_fix

runcmf/runbb-ext-markitup (PHP):

Affected version(s) >=dev-master <=0.1.0

Fix Suggestion:

Update to version no_fix

laraflat/laraflat (PHP):

Affected version(s) >=dev-dev <=3.0.0

Fix Suggestion:

Update to version no_fix

semisalov/fix-cms-core (PHP):

Affected version(s) >=dev-dev-master <=dev-php8-dev-master

Fix Suggestion:

Update to version no_fix

offerel/storage (PHP):

Affected version(s) >=1.2.2 <=1.4.5

Fix Suggestion:

Update to version no_fix

dirmax/zettaframework (PHP):

Affected version(s) >=v1.1.41 <v1.1.43

Fix Suggestion:

Update to version v1.1.43

maddoger/yii2-elfinder (PHP):

Affected version(s) =dev-master <v.1.0.0

Fix Suggestion:

Update to version v.1.0.0

ttek/tk-base (PHP):

Affected version(s) =3.2.102 <3.2.104

Fix Suggestion:

Update to version 3.2.104

adfab/core (PHP):

Affected version(s) >=0.3.5 <=0.3.19

Fix Suggestion:

Update to version no_fix

whole/core (PHP):

Affected version(s) >=dev-localization <=1.1.3.2

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) >=3.2.128 <3.2.136

Fix Suggestion:

Update to version 3.2.136

gekomod/files-bundle (PHP):

Affected version(s) >=1.1.0 <=1.1.1

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) >=3.0.30 <3.0.42

Fix Suggestion:

Update to version 3.0.42

studio-42/elfinder (PHP):

Affected version(s) >=2.1.50 <2.1.60

Fix Suggestion:

Update to version 2.1.60

simple-mvc-framework/v2 (PHP):

Affected version(s) =dev-master <v2.0-beta.1

Fix Suggestion:

Update to version v2.0-beta.1

rob006/yii-elfinder2 (PHP):

Affected version(s) >=1.1.4 <1.1.6

Fix Suggestion:

Update to version 1.1.6

herurahmat/rimbun (PHP):

Affected version(s) >=1.0.2 <=1.0.3

Fix Suggestion:

Update to version no_fix

phpffcms/ffcms-elfinder (PHP):

Affected version(s) >=dev-master <=1.0.0

Fix Suggestion:

Update to version no_fix

nova-framework/cms (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

simple-mvc-framework/v2 (PHP):

Affected version(s) >=v3.67.0 <v3.78.24

Fix Suggestion:

Update to version v3.78.24

ci4-cms-erp/ci4ms (PHP):

Affected version(s) >=dev-breadcrumbs <dev-master

Fix Suggestion:

Update to version dev-master

ttek/tk-base (PHP):

Affected version(s) =3.2.106 <3.2.108

Fix Suggestion:

Update to version 3.2.108

silverkix/cms-bundle (PHP):

Affected version(s) >=dev-master <=dev-1.0.0-beta

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) >=3.0.64 <3.0.76

Fix Suggestion:

Update to version 3.0.76

alphalemon/elfinder-bundle (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

ci4-cms-erp/ci4ms (PHP):

Affected version(s) =dev-searchpage <0.21.0

Fix Suggestion:

Update to version 0.21.0

components/elfinder (PHP):

Affected version(s) =2.2 <3.0-alpha

Fix Suggestion:

Update to version 3.0-alpha

ttek/tk-base (PHP):

Affected version(s) >=3.0.100 <3.2.64

Fix Suggestion:

Update to version 3.2.64

recca0120/elfinder (PHP):

Affected version(s) =v1.1 <v1.1.1

Fix Suggestion:

Update to version v1.1.1

ttek/tk-base (PHP):

Affected version(s) >=3.0.50 <3.0.62

Fix Suggestion:

Update to version 3.0.62

basdog22/laracms (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

genix/cms (PHP):

Affected version(s) >=dev-dependabot/composer/studio-42/elfinder-2.1.59 <v0.0.1

Fix Suggestion:

Update to version v0.0.1

bigbrush/yii2-big (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

uom/tk-base (PHP):

Affected version(s) >=3.4.6 <3.4.16

Fix Suggestion:

Update to version 3.4.16

imagecms/imagecms (PHP):

Affected version(s) >=v4.4 <v4.9

Fix Suggestion:

Update to version v4.9

ttek/tk-base (PHP):

Affected version(s) >=dev-ver1 <1.0.50

Fix Suggestion:

Update to version 1.0.50

copona/copona (PHP):

Affected version(s) =dev-guest2checkout <dev-dependabot/composer/twig/twig-2.14.11

Fix Suggestion:

Update to version dev-dependabot/composer/twig/twig-2.14.11

ttek/tk-base (PHP):

Affected version(s) =3.0.x-dev <3.0.2

Fix Suggestion:

Update to version 3.0.2

wtolk/adfm-elfinder (PHP):

Affected version(s) =dev-tinymce-elfinder

Fix Suggestion:

Update to version no_fix

serhatozles/yii2-elfinder (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

rob006/yii-elfinder2 (PHP):

Affected version(s) =1.0.x-dev <1.0.1

Fix Suggestion:

Update to version 1.0.1

pkrs/pkrs-framework (PHP):

Affected version(s) >=0.1.5 <0.1.8

Fix Suggestion:

Update to version 0.1.8

studio-42/elfinder (PHP):

Affected version(s) >=2.0-beta <2.1.x-dev

Fix Suggestion:

Update to version 2.1.x-dev

uom/tk-base (PHP):

Affected version(s) =1.0.138 <1.0.140

Fix Suggestion:

Update to version 1.0.140

studio-42/elfinder (PHP):

Affected version(s) >=dev-2.1-src <2.1.41

Fix Suggestion:

Update to version 2.1.41

herurahmat/rimbunci3 (PHP):

Affected version(s) >=1.0.1 <=1.0.3

Fix Suggestion:

Update to version no_fix

copona/copona (PHP):

Affected version(s) =dev-media-manager <dev-newcart

Fix Suggestion:

Update to version dev-newcart

bigbrush/yii2-big (PHP):

Affected version(s) >=1.1.0 <1.2.9

Fix Suggestion:

Update to version 1.2.9

research-nk/rnk-elfinder-bundle (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

copona/copona (PHP):

Affected version(s) =dev-EV-code-refactoring <dev-checkout_new

Fix Suggestion:

Update to version dev-checkout_new

redkite-labs/redkite-labs-elfinder-bundle (PHP):

Affected version(s) =v1.1.3.2 <1.1.3.5

Fix Suggestion:

Update to version 1.1.3.5

tugumuda/helpers (PHP):

Affected version(s) >=dev-master <=5.4.x-dev

Fix Suggestion:

Update to version no_fix

genix/cms (PHP):

Affected version(s) >=v0.0.7-alpha <v1.1.12.x-dev

Fix Suggestion:

Update to version v1.1.12.x-dev

ttek/tk-base (PHP):

Affected version(s) >=3.2.72 <3.2.96

Fix Suggestion:

Update to version 3.2.96

ttek/tk-base (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

nova-framework/novacms (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

dirmax/zettaframework (PHP):

Affected version(s) >=v1.1.44 <v1.1.46

Fix Suggestion:

Update to version v1.1.46

gekomod/files-admin-bundle (PHP):

Affected version(s) =1.0

Fix Suggestion:

Update to version no_fix

nickbur/sunrisecms (PHP):

Affected version(s) =v1.0.0

Fix Suggestion:

Update to version no_fix

skcms/admin-bundle (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

keltanas/site-forever-cms (PHP):

Affected version(s) =0.4.1.x-dev <0.5.x-dev

Fix Suggestion:

Update to version 0.5.x-dev

alxishin/elfinder (PHP):

Affected version(s) >=dev-master <=2.1.59.1

Fix Suggestion:

Update to version no_fix

rob006/yii-elfinder2 (PHP):

Affected version(s) >=1.0.2 <1.1.3

Fix Suggestion:

Update to version 1.1.3

playground/playground (PHP):

Affected version(s) >=1.1.1 <=2.2.0

Fix Suggestion:

Update to version no_fix

playground/design (PHP):

Affected version(s) >=1.1.1 <1.2.1

Fix Suggestion:

Update to version 1.2.1

nao-pon/elfinder-nightly (PHP):

Affected version(s) =2.0.x-dev <dev-2.0_n

Fix Suggestion:

Update to version dev-2.0_n

dirmax/zettaframework (PHP):

Affected version(s) >=v1.1.48 <=v1.1.55

Fix Suggestion:

Update to version no_fix

Related Resources (1)

https://github.com/Studio-42/elFinder/commit/bb9aaa7b096a1b83f2f85657c43f12131ece2891

Do you need more information?

CVSS v4

Base Score:

8.7

Attack Vector

NETWORK

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

NONE

User Interaction

NONE

Vulnerable System Confidentiality

HIGH

Vulnerable System Integrity

NONE

Vulnerable System Availability

NONE

Subsequent System Confidentiality

NONE

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE