What is CVE-2020-12103?

CVE-2020-12103 is a high-severity vulnerability in Prasathmani Tiny_file_manager, classified under Path Traversal. CVSS score: 7.7/10. Published 2020-04-28.

How severe is CVE-2020-12103?

High severity. CVSS v3 base score is 7.7 out of 10.

Path Traversal in Prasathmani Tiny_file_manager

CVE-2020-12103

In Tiny File Manager 2.4.1 there is a vulnerability in the ajax file backup copy functionality which allows authenticated users to create backup copies of files (with .bak extension) outside the scope in the same directory in which they ar…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.015 (70.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.7 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N.

Affected products

Prasathmani Tiny_file_manager — versions 2.4.1
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

cve@mitre.org
cve@mitre.org
cve@mitre.org

Frequently asked questions

What is CVE-2020-12103?: CVE-2020-12103 is a high-severity vulnerability in Prasathmani Tiny_file_manager, classified under Path Traversal. CVSS score: 7.7/10. Published 2020-04-28.
How severe is CVE-2020-12103?: High severity. CVSS v3 base score is 7.7 out of 10.