CVE-2022-23044: CSRF
Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to persuade users to perform unintended actions within the application. This is possible because the application is vulnerable to CSRF.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-23044?
The severity of CVE-2022-23044 is high with a CVSS score of 8.8.
How does CVE-2022-23044 affect Tiny File Manager version 2.4.8?
CVE-2022-23044 allows an unauthenticated remote attacker to perform unintended actions within Tiny File Manager version 2.4.8.
Is authentication required to exploit CVE-2022-23044?
No, CVE-2022-23044 can be exploited by an unauthenticated remote attacker.
How can I fix the CSRF vulnerability in Tiny File Manager version 2.4.8?
To fix the CSRF vulnerability in Tiny File Manager version 2.4.8, you should update the application to a patched version provided by the vendor.
Where can I find more information about CVE-2022-23044?
You can find more information about CVE-2022-23044 on the Fluid Attacks advisories page and the GitHub repository for Tiny File Manager.