CVE-2022-45475: Medium severity Tiny File Manager Project Tiny File Manager vulnerability
Published Nov 25, 2022
·Updated
Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to access the application's internal files. This is possible because the application is vulnerable to broken access control.
Affected Software
2 affected components
Tiny File Manager Project Tiny File Manager=2.4.8
prasathmani Tiny File Manager=2.4.8
Event History
Nov 25, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-45475?
CVE-2022-45475 is considered a critical vulnerability due to its ability to allow unauthenticated access to sensitive internal files.
2
How do I fix CVE-2022-45475?
To fix CVE-2022-45475, upgrade Tiny File Manager to a version that addresses the broken access control issue.
3
Who is affected by CVE-2022-45475?
CVE-2022-45475 affects users of Tiny File Manager version 2.4.8.
4
What type of vulnerability is CVE-2022-45475?
CVE-2022-45475 is characterized as a broken access control vulnerability.
5
What can an attacker achieve with CVE-2022-45475?
An attacker exploiting CVE-2022-45475 can gain unauthorized access to the application's internal files.