Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-40965
8.8
HIGHCVSS v3
Published
September 15, 2021
CVSS v2
9.3 HIGH
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
A Cross-Site Request Forgery (CSRF) vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload files and run OS commands by inducing the Administrator user to browse a URL controlled by an attacker.
prasathmani/tinyfilemanager
GitHubSingle-file PHP file manager, browser and manage your files efficiently and easily with tinyfilemanager
GitHubSingle-file PHP file manager, browser and manage your files efficiently and easily with tinyfilemanager= *, <= 2.4.6NVD
