CVE-2022-1000: Path Traversal in prasathmani/tinyfilemanager
Published Mar 17, 2022
·Updated
Path Traversal in GitHub repository prasathmani/tinyfilemanager prior to 2.4.7.
Affected Software
2 affected components
Tiny File Manager Project Tiny File Manager<2.4.7
prasathmani Tiny File Manager<2.4.7
Remediation
Event History
Mar 17, 2022
CVE Published
via MITRE·10:30 AM
Data Sourced
via MITRE·10:30 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-1000?
CVE-2022-1000 is classified as a medium severity vulnerability due to its potential for exploitation leading to unauthorized file access.
2
How do I fix CVE-2022-1000?
To fix CVE-2022-1000, upgrade Tinyfilemanager to version 2.4.7 or later.
3
What type of vulnerability is CVE-2022-1000?
CVE-2022-1000 is a path traversal vulnerability affecting the Tinyfilemanager application.
4
What versions of Tinyfilemanager are affected by CVE-2022-1000?
All versions of Tinyfilemanager prior to 2.4.7 are affected by CVE-2022-1000.
5
Is CVE-2022-1000 actively exploited?
There are no specific reports indicating active exploitation of CVE-2022-1000, but it is advisable to apply the patch to mitigate risks.