Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-12102
7.7
HIGHCVSS v3
Published
April 28, 2020
CVSS v2
6.8 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
In Tiny File Manager 2.4.1, there is a Path Traversal vulnerability in the ajax recursive directory listing functionality. This allows authenticated users to enumerate directories and files on the filesystem (outside of the application scope).
prasathmani/tinyfilemanager
GitHubSingle-file PHP file manager, browser and manage your files efficiently and easily with tinyfilemanager
GitHubSingle-file PHP file manager, browser and manage your files efficiently and easily with tinyfilemanager= 2.4.1NVD