CVE-2021-45010: Path Traversal
Published Mar 15, 2022
·Updated
A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7 allows remote attackers (with valid user accounts) to upload malicious PHP files to the webroot, leading to code execution.
Affected Software
2 affected components
Tiny File Manager Project Tiny File Manager<=2.4.7
prasathmani Tiny File Manager<=2.4.7
Remediation
Patch Available
Event History
Mar 15, 2022
CVE Published
via MITRE·11:13 AM
Data Sourced
via MITRE·11:13 AM
Description
Data Sourced
via NVD·12:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-45010?
CVE-2021-45010 is rated as critical due to its potential to allow remote code execution.
2
How do I fix CVE-2021-45010?
To fix CVE-2021-45010, upgrade Tiny File Manager to version 2.4.8 or later where the vulnerability has been patched.
3
What type of attack does CVE-2021-45010 allow?
CVE-2021-45010 allows remote authenticated attackers to upload malicious PHP files, leading to code execution.
4
Who is affected by CVE-2021-45010?
CVE-2021-45010 affects users of Tiny File Manager versions prior to 2.4.7.
5
What file is involved in the vulnerability CVE-2021-45010?
The vulnerability CVE-2021-45010 is present in the file upload functionality of tinyfilemanager.php.