Path Traversal Vulnerability in Tiny File Manager 2.4.1 Allows Unauthorized File Enumeration

CVE-2020-12102

In Tiny File Manager 2.4.1, there is a Path Traversal vulnerability in the ajax recursive directory listing functionality. This allows authenticated users to enumerate directories and files on the filesystem (outside of the application scope).

Learn more about our User Device Pen Test.