Lucene search
HistoryNov 25, 2022 - 6:15 p.m.
CVE-2022-45475
tiny file manager
version 2.4.8
access control vulnerability
cve-2022-45475
unauthenticated remote attacker
internal files access
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS
0.003
Percentile
68.0%
Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to access the application’s internal files. This is possible because the application is vulnerable to broken access control.
Affected configurations
Node
tiny_file_manager_projecttiny_file_managerMatch2.4.8
Related
prion
prion
Improper access control
2022-11-25 18:15:00
cvelist
cvelist
CVE-2022-45475
2022-11-25 00:00:00
cve
cve
CVE-2022-45475
2022-11-25 18:15:11
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS
0.003
Percentile
68.0%
Related for NVD:CVE-2022-45475