Improper access control

2022-11-2518:15:00

PRIOn knowledge base

www.prio-n.com

tiny file manager

access control

remote attacker

unauthenticated

internal files

broken access control

6.5 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.4%

JSON

Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to access the application’s internal files. This is possible because the application is vulnerable to broken access control.

CPENameOperatorVersion
tiny_file_managereq2.4.8

CPE	Name	Operator	Version
	tiny_file_manager	eq	2.4.8

References

fluidattacks.com/advisories/mosey/

github.com/prasathmani/tinyfilemanager/