WS-2023-0176 | Mend Vulnerability Database

Vulnerability DatabaseWS-2023-0176

WS-2023-0176

Published:May 15, 2026

Updated:May 15, 2026

Path Traversal vulnerability in PHP LocalVolumeDriver connector

Affected Packages

lionbridge.flexframe.webui (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) >=1.0.52 <1.0.156

Fix Suggestion:

Update to version 1.0.156

ttek/tk-base (PHP):

Affected version(s) >=3.2.72 <3.2.96

Fix Suggestion:

Update to version 3.2.96

ttek/tk-base (PHP):

Affected version(s) >=3.0.78 <3.0.84

Fix Suggestion:

Update to version 3.0.84

skcms/admin-bundle (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

uom/tk-base (PHP):

Affected version(s) >=3.4.6 <3.4.16

Fix Suggestion:

Update to version 3.4.16

ttek/tk-base (PHP):

Affected version(s) >=dev-ver1 <1.0.50

Fix Suggestion:

Update to version 1.0.50

nickbur/sunrisecms (PHP):

Affected version(s) =v1.0.0

Fix Suggestion:

Update to version no_fix

redkite-labs/redkite-labs-elfinder-bundle (PHP):

Affected version(s) =v1.1.3.2 <1.1.3.5

Fix Suggestion:

Update to version 1.1.3.5

redkite-labs/redkite-cms (PHP):

Affected version(s) >=v1.1.3 <1.1.3.5

Fix Suggestion:

Update to version 1.1.3.5

studio-42/elfinder (PHP):

Affected version(s) >=2.0-beta <2.1.x-dev

Fix Suggestion:

Update to version 2.1.x-dev

simple-mvc-framework/v2 (PHP):

Affected version(s) >=v3.67.0 <v3.78.24

Fix Suggestion:

Update to version v3.78.24

nickbur/divinecms (PHP):

Affected version(s) =v1.0.0

Fix Suggestion:

Update to version no_fix

genix/cms (PHP):

Affected version(s) >=dev-dependabot/composer/phpmailer/phpmailer-6.5.0 <=dev-dependabot/composer/guzzlehttp/psr7-1.8.5

Fix Suggestion:

Update to version no_fix

nova-framework/novacms (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

offerel/storage (PHP):

Affected version(s) >=dev-dev <1.0.1

Fix Suggestion:

Update to version 1.0.1

research-nk/rnk-elfinder-bundle (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

dirmax/zettaframework (PHP):

Affected version(s) >=v0.1 <v1.0

Fix Suggestion:

Update to version v1.0

bigbrush/yii2-big (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

herurahmat/rimbun (PHP):

Affected version(s) >=1.0.2 <=1.0.3

Fix Suggestion:

Update to version no_fix

rob006/yii-elfinder2 (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

whole/core (PHP):

Affected version(s) >=dev-localization <=1.1.3.2

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) >=3.0.30 <3.0.42

Fix Suggestion:

Update to version 3.0.42

ttek/tk-base (PHP):

Affected version(s) >=3.2.128 <3.2.136

Fix Suggestion:

Update to version 3.2.136

wtolk/adfm-elfinder (PHP):

Affected version(s) =dev-tinymce-elfinder

Fix Suggestion:

Update to version no_fix

silverkix/cms-bundle (PHP):

Affected version(s) >=dev-master <=dev-1.0.0-beta

Fix Suggestion:

Update to version no_fix

wufeifei/grw (PHP):

Affected version(s) >=dev-developer <=dev-pr/29

Fix Suggestion:

Update to version no_fix

nova-framework/framework (PHP):

Affected version(s) >=v3.67.0 <v3.78.24

Fix Suggestion:

Update to version v3.78.24

offerel/storage (PHP):

Affected version(s) >=1.2.2 <=1.4.5

Fix Suggestion:

Update to version no_fix

hgati/magento-1-page-builder-module (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

tugumuda/helpers (PHP):

Affected version(s) >=dev-master <=5.4.x-dev

Fix Suggestion:

Update to version no_fix

ci4-cms-erp/ci4ms (PHP):

Affected version(s) >=dev-breadcrumbs <dev-master

Fix Suggestion:

Update to version dev-master

phpffcms/ffcms-elfinder (PHP):

Affected version(s) >=dev-master <=1.0.0

Fix Suggestion:

Update to version no_fix

maddoger/yii2-elfinder (PHP):

Affected version(s) =dev-master <v.1.0.0

Fix Suggestion:

Update to version v.1.0.0

keltanas/site-forever-cms (PHP):

Affected version(s) =0.4.1.x-dev <0.5.x-dev

Fix Suggestion:

Update to version 0.5.x-dev

maddoger/yii2-elfinder (PHP):

Affected version(s) =v1.1

Fix Suggestion:

Update to version no_fix

romjkeeeen/fix-cms-core1 (PHP):

Affected version(s) >=dev-dev-master <=dev-php8-dev-master

Fix Suggestion:

Update to version no_fix

laraflat/laraflat (PHP):

Affected version(s) >=dev-dev <=3.0.0

Fix Suggestion:

Update to version no_fix

dirmax/zettaframework (PHP):

Affected version(s) >=v1.1.41 <v1.1.43

Fix Suggestion:

Update to version v1.1.43

ttek/tk-base (PHP):

Affected version(s) =3.0.x-dev <3.0.2

Fix Suggestion:

Update to version 3.0.2

dirmax/zettaframework (PHP):

Affected version(s) >=v1.1.44 <v1.1.46

Fix Suggestion:

Update to version v1.1.46

runcmf/runbb-ext-markitup (PHP):

Affected version(s) >=dev-master <=0.1.0

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) >=3.0.64 <3.0.76

Fix Suggestion:

Update to version 3.0.76

gyman/supr (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

bigbrush/yii2-big (PHP):

Affected version(s) =1.2.10

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) >=3.0.100 <3.2.64

Fix Suggestion:

Update to version 3.2.64

ttek/tk-base (PHP):

Affected version(s) >=3.2.142 <8.0.0

Fix Suggestion:

Update to version 8.0.0

ttek/tk-base (PHP):

Affected version(s) >=3.0.50 <3.0.62

Fix Suggestion:

Update to version 3.0.62

copona/copona (PHP):

Affected version(s) =dev-EV-code-refactoring <dev-checkout_new

Fix Suggestion:

Update to version dev-checkout_new

recca0120/elfinder (PHP):

Affected version(s) =v1.1 <v1.1.1

Fix Suggestion:

Update to version v1.1.1

genix/cms (PHP):

Affected version(s) >=dev-dependabot/composer/studio-42/elfinder-2.1.59 <v0.0.1

Fix Suggestion:

Update to version v0.0.1

uom/tk-base (PHP):

Affected version(s) >=3.4.18 <=3.4.26

Fix Suggestion:

Update to version no_fix

ecnet/admin (PHP):

Affected version(s) =dev-master <1.0

Fix Suggestion:

Update to version 1.0

adfab/core (PHP):

Affected version(s) >=0.3.5 <=0.3.19

Fix Suggestion:

Update to version no_fix

herurahmat/rimbunci3 (PHP):

Affected version(s) >=1.0.1 <=1.0.3

Fix Suggestion:

Update to version no_fix

semisalov/fix-cms-core (PHP):

Affected version(s) >=dev-dev-master <=dev-php8-dev-master

Fix Suggestion:

Update to version no_fix

gekomod/files-bundle (PHP):

Affected version(s) =dev-master <0.2

Fix Suggestion:

Update to version 0.2

simple-mvc-framework/v2 (PHP):

Affected version(s) =dev-master <v2.0-beta.1

Fix Suggestion:

Update to version v2.0-beta.1

pkrs/pkrs-framework (PHP):

Affected version(s) >=0.1.5 <0.1.8

Fix Suggestion:

Update to version 0.1.8

playground/design (PHP):

Affected version(s) >=1.1.1 <1.2.1

Fix Suggestion:

Update to version 1.2.1

simple-mvc-framework/v2 (PHP):

Affected version(s) =v4.0.0 <4.0.1

Fix Suggestion:

Update to version 4.0.1

copona/copona (PHP):

Affected version(s) >=dev-orm-eloquent <dev-pdf

Fix Suggestion:

Update to version dev-pdf

ttek/tk-base (PHP):

Affected version(s) >=3.0.86 <3.0.98

Fix Suggestion:

Update to version 3.0.98

alphalemon/elfinder-bundle (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

siteforever/site-forever-cms (PHP):

Affected version(s) =0.4.1.x-dev <0.5.x-dev

Fix Suggestion:

Update to version 0.5.x-dev

copona/copona (PHP):

Affected version(s) =dev-guest2checkout <dev-dependabot/composer/twig/twig-2.14.11

Fix Suggestion:

Update to version dev-dependabot/composer/twig/twig-2.14.11

rob006/yii-elfinder2 (PHP):

Affected version(s) >=1.1.4 <1.1.6

Fix Suggestion:

Update to version 1.1.6

ttek/tk-base (PHP):

Affected version(s) =3.2.110 <3.2.112

Fix Suggestion:

Update to version 3.2.112

components/elfinder (PHP):

Affected version(s) =2.2 <3.0-alpha

Fix Suggestion:

Update to version 3.0-alpha

studio-42/elfinder (PHP):

Affected version(s) >=dev-2.1-src <2.1.41

Fix Suggestion:

Update to version 2.1.41

mofei/oneone (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

bigbrush/yii2-big (PHP):

Affected version(s) >=1.1.0 <1.2.9

Fix Suggestion:

Update to version 1.2.9

nova-framework/cms (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

nova-framework/framework (PHP):

Affected version(s) =v4.0.0 <4.0.1

Fix Suggestion:

Update to version 4.0.1

ttek/tk-base (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

gekomod/files-admin-bundle (PHP):

Affected version(s) =1.0

Fix Suggestion:

Update to version no_fix

redkite-labs/redkite-labs-elfinder-bundle (PHP):

Affected version(s) =1.1.0-beta <1.1.x-dev

Fix Suggestion:

Update to version 1.1.x-dev

uom/tk-base (PHP):

Affected version(s) =1.0.138 <1.0.140

Fix Suggestion:

Update to version 1.0.140

playground/playground (PHP):

Affected version(s) >=1.1.1 <=2.2.0

Fix Suggestion:

Update to version no_fix

basdog22/laracms_nopublic (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

rob006/yii-elfinder2 (PHP):

Affected version(s) =1.0.x-dev <1.0.1

Fix Suggestion:

Update to version 1.0.1

studio-42/elfinder (PHP):

Affected version(s) >=2.1.50 <2.1.60

Fix Suggestion:

Update to version 2.1.60

serhatozles/yii2-elfinder (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

yukisaw/elfinder (PHP):

Affected version(s) >=dev-filesize <=2.2.2

Fix Suggestion:

Update to version no_fix

alxishin/elfinder (PHP):

Affected version(s) >=dev-master <=2.1.59.1

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) =3.2.102 <3.2.104

Fix Suggestion:

Update to version 3.2.104

imagecms/imagecms (PHP):

Affected version(s) >=v4.4 <v4.9

Fix Suggestion:

Update to version v4.9

nova-framework/framework (PHP):

Affected version(s) =dev-master <v2.0-beta.1

Fix Suggestion:

Update to version v2.0-beta.1

ttek/tk-base (PHP):

Affected version(s) >=3.0.12 <3.0.24

Fix Suggestion:

Update to version 3.0.24

adfab/core (PHP):

Affected version(s) >=dev-master <0.3.2

Fix Suggestion:

Update to version 0.3.2

ci4-cms-erp/ci4ms (PHP):

Affected version(s) =dev-searchpage <0.21.0

Fix Suggestion:

Update to version 0.21.0

basdog22/laracms (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

ttek/tk-base (PHP):

Affected version(s) =3.2.106 <3.2.108

Fix Suggestion:

Update to version 3.2.108

dirmax/zettaframework (PHP):

Affected version(s) >=v1.1.48 <=v1.1.55

Fix Suggestion:

Update to version no_fix

a70838697/yii2elfinder (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

gekomod/files-bundle (PHP):

Affected version(s) >=1.1.0 <=1.1.1

Fix Suggestion:

Update to version no_fix

copona/copona (PHP):

Affected version(s) =dev-media-manager <dev-newcart

Fix Suggestion:

Update to version dev-newcart

redkite-labs/redkite-labs-elfinder-bundle (PHP):

Affected version(s) =v1.1.0 <v1.1.3

Fix Suggestion:

Update to version v1.1.3

helios-ag/fm-elfinder (PHP):

Affected version(s) >=dev-master <1.0.1

Fix Suggestion:

Update to version 1.0.1

rob006/yii-elfinder2 (PHP):

Affected version(s) >=1.0.2 <1.1.3

Fix Suggestion:

Update to version 1.1.3

nao-pon/elfinder-nightly (PHP):

Affected version(s) =2.0.x-dev <dev-2.0_n

Fix Suggestion:

Update to version dev-2.0_n

genix/cms (PHP):

Affected version(s) >=v0.0.7-alpha <v1.1.12.x-dev

Fix Suggestion:

Update to version v1.1.12.x-dev

studio-42/elfinder (PHP):

Affected version(s) >=dev-master <1.0.1

Fix Suggestion:

Update to version 1.0.1

Related Resources (1)

https://github.com/Studio-42/elFinder/commit/bb9aaa7b096a1b83f2f85657c43f12131ece2891

Do you need more information?

CVSS v4

Base Score:

8.7

Attack Vector

NETWORK

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

NONE

User Interaction

NONE

Vulnerable System Confidentiality

HIGH

Vulnerable System Integrity

NONE

Vulnerable System Availability

NONE

Subsequent System Confidentiality

NONE

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE