description: Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to access the application's internal files. This is possible because the application is vulnerable to broken access control.
problem types: Remote command execution
affected:
{
defaultStatus: unaffected
product: Tiny File Manager
vendor: n/a
versions:
status: affected, version: 2.4.8
}