Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to persuade users to perform unintended actions within the application. This is possible because the application is vulnerable to CSRF.
References
| Link | Resource |
|---|---|
| https://fluidattacks.com/advisories/mosey/ | Exploit Third Party Advisory |
| https://github.com/prasathmani/tinyfilemanager/ | Exploit Issue Tracking Third Party Advisory |
| https://fluidattacks.com/advisories/mosey/ | Exploit Third Party Advisory |
| https://github.com/prasathmani/tinyfilemanager/ | Exploit Issue Tracking Third Party Advisory |
Configurations
History
31 Dec 2025, 19:40
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Prasathmani tiny File Manager
Prasathmani |
|
| CPE | cpe:2.3:a:prasathmani:tiny_file_manager:2.4.8:*:*:*:*:*:*:* |
21 Nov 2024, 06:47
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://fluidattacks.com/advisories/mosey/ - Exploit, Third Party Advisory | |
| References | () https://github.com/prasathmani/tinyfilemanager/ - Exploit, Issue Tracking, Third Party Advisory |
07 Nov 2023, 03:44
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to persuade users to perform unintended actions within the application. This is possible because the application is vulnerable to CSRF. |
Information
Published : 2022-11-25 17:15
Updated : 2025-12-31 19:40
NVD link : CVE-2022-23044
Mitre link : CVE-2022-23044
CVE.ORG link : CVE-2022-23044
JSON object : View
Products Affected
prasathmani
- tiny_file_manager
CWE
CWE-352
Cross-Site Request Forgery (CSRF)