CVE-2022-45475

Description

Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to access the application's internal files. This is possible because the application is vulnerable to broken access control.

References

https://github.com/prasathmani/tinyfilemanager/

https://fluidattacks.com/advisories/mosey/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS