VULNERABILITY INTELLIGENCE

CVE-2022-45475

CVSS score6.5 MEDIUM
EPSS probability0.92%
CISA KEVNot currently listed
Published2022-11-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Description

Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to access the application's internal files. This is possible because the application is vulnerable to broken access control.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-284

Primary references