Lucene search
HistoryNov 25, 2022 - 6:15 p.m.
CVE-2022-45476
cve-2022-45476
tiny file manager
code execution
insecure file upload
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
65.9%
Tiny File Manager version 2.4.8 executes the code of files uploaded by users of the application, instead of just returning them for download. This is possible because the application is vulnerable to insecure file upload.
Affected configurations
Node
tiny_file_manager_projecttiny_file_managerMatch2.4.8
Related
cve
cve
CVE-2022-45476
2022-11-25 18:15:11
cvelist
cvelist
CVE-2022-45476
2022-11-25 00:00:00
prion
prion
Unrestricted file upload
2022-11-25 18:15:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
65.9%
Related for NVD:CVE-2022-45476