8.8 Élevée

CVE-2022-23044 Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to persuade users to perform unintended…

Description

Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to persuade users to perform unintended actions within the application. This is possible because the application is vulnerable to CSRF.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Tiny File Manager	2.4.8	Pas de correctif indiqué

Les 3 CVE de Tiny File Manager →

CVE-2022-45475 Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to access the application's internal files 6.5 Moyenne CVE-2022-45476 Tiny File Manager version 2.4.8 executes the code of files uploaded by users of the application, instead of just… 9.8 Critique

Vous utilisez Tiny File Manager ?

Suivre cette CVE Surveiller Tiny File Manager Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2022-23044

Chronologie

Publiée 25 novembre 2022
Dernière modification 25 avril 2025

Références

github.com github.com
fluidattacks.com fluidattacks.com

Suivre cette CVE

CVE-2022-23044 Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to persuade users to perform unintended…

Description

Produits et versions touchés

Autres CVE de Tiny File Manager