CVE-2022-40490

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-40490
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-40490.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-40490
Published
2025-02-06T17:15:13Z
Modified
2025-07-04T09:56:49.652311Z
Summary
[none]
Details

Tiny File Manager v2.4.7 and below was discovered to contain a Cross Site Scripting (XSS) vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload injected into the name of an uploaded or already existing file.

References

Affected packages

Git / github.com/prasathmani/tinyfilemanager

Affected ranges

Type
GIT
Repo
https://github.com/prasathmani/tinyfilemanager
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected

Affected versions

2.*

2.0.1
2.0.2
2.2.0
2.3
2.3.4
2.3.8
2.4.0
2.4.1
2.4.3
2.4.7