CVE-2020-12103

In Tiny File Manager 2.4.1 there is a vulnerability in the ajax file backup copy functionality which allows authenticated users to create backup copies of…

published April 28, 2020

CVSS
—
EPSS
1%
Percentile
73.3
In the wild
Unconfirmed
What it is

In Tiny File Manager 2.4.1 there is a vulnerability in the ajax file backup copy functionality which allows authenticated users to create backup copies of files (with .bak extension) outside the scope in the same directory in which they are stored.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01458 · 73.3th percentile
Published
2020-04-28T21:07Z
EPSS history
Timeline
  • 28 APR 21:07Z
    In Tiny File Manager 2.4.1 there is a vulnerability in the ajax file backup copy functionality which allows authenticated users to create backup copies of…
    cvelistv5