Cross site request forgery (csrf)

2022-11-2517:15:00

PRIOn knowledge base

www.prio-n.com

cross site request forgery

unauthenticated remote attacker

unintended actions

application vulnerability

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

65.0%

JSON

Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to persuade users to perform unintended actions within the application. This is possible because the application is vulnerable to CSRF.

CPENameOperatorVersion
tiny_file_managereq2.4.8

CPE	Name	Operator	Version
	tiny_file_manager	eq	2.4.8

References

fluidattacks.com/advisories/mosey/

github.com/prasathmani/tinyfilemanager/