CVE-2022-1000

CRITICAL 9.8CVE-2022-1000 · Published 17/03/2022 · updated 17/06/2026

In short

CVE-2022-1000 is a CRITICAL (CVSS 9.8) vulnerability affecting tiny file manager (prasathmani).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.6% of all vulnerabilities.
Fix: update to 2.4.7 or later.

Package	Affected versions	Patched versions
tiny file manager prasathmani	`< 2.4.7`	`2.4.7`

Path Traversal in GitHub repository prasathmani/tinyfilemanager prior to 2.4.7.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.