CVE-2020-12102: Path Traversal

Published Apr 28, 2020

Updated

In Tiny File Manager 2.4.1, there is a Path Traversal vulnerability in the ajax recursive directory listing functionality. This allows authenticated users to enumerate directories and files on the filesystem (outside of the application scope).

Affected Software

2 affected components

Tiny File Manager Project Tiny File Manager=2.4.1

prasathmani Tiny File Manager=2.4.1

Event History

Apr 28, 2020

CVE Published

via MITRE·09:01 PM

Data Sourced

via MITRE·09:01 PM

Description

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2020-12102?

CVE-2020-12102 is classified as a high severity vulnerability due to the potential exposure of sensitive filesystem information.

How do I fix CVE-2020-12102?

To mitigate CVE-2020-12102, update Tiny File Manager to the latest version that addresses the path traversal vulnerability.

Who is affected by CVE-2020-12102?

Only users of Tiny File Manager version 2.4.1 are affected by CVE-2020-12102.

What type of attack does CVE-2020-12102 enable?

CVE-2020-12102 enables authenticated users to perform directory enumeration attacks on the server.

What functionality in Tiny File Manager is vulnerable in CVE-2020-12102?

The vulnerability in CVE-2020-12102 is found in the ajax recursive directory listing functionality.