CVE-2021-40965

Published: 2021-09-15T18:15Z

Last Modified: 2024-11-21T06:25Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A Cross-Site Request Forgery (CSRF) vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload files and run OS commands by inducing the Administrator user to browse a URL controlled by an attacker. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt