CVE-2020-12102

In Tiny File Manager 2.4.1, there is a Path Traversal vulnerability in the ajax recursive directory listing functionality

published April 28, 2020

CVSS
—
EPSS
2%
Percentile
78.7
In the wild
Unconfirmed
What it is

In Tiny File Manager 2.4.1, there is a Path Traversal vulnerability in the ajax recursive directory listing functionality. This allows authenticated users to enumerate directories and files on the filesystem (outside of the application scope).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01830 · 78.7th percentile
Published
2020-04-28T21:01Z
EPSS history
Timeline
  • 28 APR 21:01Z
    In Tiny File Manager 2.4.1, there is a Path Traversal vulnerability in the ajax recursive directory listing functionality
    cvelistv5