Security Advisory
CVE-2021-40965
8.8
HIGH
Vulnerability Description
A Cross-Site Request Forgery (CSRF) vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload files and run OS commands by inducing the Administrator user to browse a URL controlled by an attacker.
Published Date
September 15, 2021
Official Source
NIST NVD Advisory