Lucene search
HistoryNov 25, 2022 - 5:15 p.m.
CVE-2022-23044
file manager
csrf
vulnerability
unauthenticated
remote attacker
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
65.0%
Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to persuade users to perform unintended actions within the application. This is possible because the application is vulnerable to CSRF.
Affected configurations
Node
tiny_file_manager_projecttiny_file_managerMatch2.4.8
Related
cve
cve
CVE-2022-23044
2022-11-25 17:15:10
prion
prion
Cross site request forgery (csrf)
2022-11-25 17:15:00
cvelist
cvelist
CVE-2022-23044
2022-11-25 00:00:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
65.0%
Related for NVD:CVE-2022-23044