{"id":"CVE-2023-26564","details":"The Syncfusion EJ2 ASPCore File Provider 3ac357f is vulnerable to Models/PhysicalFileProvider.cs directory traversal. As a result, an unauthenticated attacker can list files within a directory, download any file, or upload any file to any directory accessible by the web server.","modified":"2026-10-28T02:30:45.401707697Z","published":"2023-07-12T00:00:00Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/26xxx/CVE-2023-26564.json","cna_assigner":"mitre"},"references":[{"type":"WEB","url":"https://ej2.syncfusion.com/documentation/file-manager/file-system-provider/"},{"type":"WEB","url":"https://github.com/RupturaInfoSec/CVE-2023-26563-26564-26565/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/26xxx/CVE-2023-26564.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26564"},{"type":"PACKAGE","url":"https://github.com/SyncfusionExamples/ej2-aspcore-file-provider"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/syncfusionexamples/ej2-aspcore-file-provider","events":[{"introduced":"0"},{"last_affected":"3ac357f"}],"database_specific":{"extracted_events":[{"range":[{"introduced":"0"},{"last_affected":"3ac357f"}],"source":"DESCRIPTION"}]}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-26564.json"}}],"schema_version":"1.9.2"}