CVE-2022-40916: Critical severity Tiny File Manager Tiny File Manager vulnerability
Published Feb 6, 2025
·Updated
Tiny File Manager v2.4.7 and below is vulnerable to session fixation.
Affected Software
2 affected components
Tiny File Manager Tiny File Manager<2.4.7
prasathmani Tiny File Manager<=2.4.7
Event History
Feb 6, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-40916?
CVE-2022-40916 has a severity level of high due to its potential to allow session fixation attacks.
2
How do I fix CVE-2022-40916?
To fix CVE-2022-40916, upgrade Tiny File Manager to version 2.4.8 or above.
3
What impact does CVE-2022-40916 have on users?
CVE-2022-40916 may allow attackers to hijack user sessions, compromising user accounts.
4
Is CVE-2022-40916 specific to any platform?
CVE-2022-40916 specifically affects Tiny File Manager versions 2.4.7 and below.
5
When was CVE-2022-40916 published?
CVE-2022-40916 was published on November 1, 2022.