Lucene search
HistoryNov 25, 2022 - 5:15 p.m.
CVE-2022-23044
file manager
csrf
vulnerability
unauthenticated
remote attacker
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
64.8%
Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to persuade users to perform unintended actions within the application. This is possible because the application is vulnerable to CSRF.
Affected configurations
Node
tiny_file_manager_projecttiny_file_managerMatch2.4.8
Related
prion
prion
Cross site request forgery (csrf)
2022-11-25 17:15:00
cvelist
cvelist
CVE-2022-23044
2022-11-25 00:00:00
cve
cve
CVE-2022-23044
2022-11-25 17:15:10
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
64.8%
Related for NVD:CVE-2022-23044