CVE-2022-40916 - Tiny File Manager v2.4.7 and below is vulnerable to session fixation

CRITICAL

Tiny File Manager v2.4.7 and below is vulnerable to session fixation

Published Feb 6, 2025

9.8

CRITICAL

CVSS 3.1

EPSS 0.82%

Tiny File Manager v2.4.7 and below is vulnerable to session fixation.

No remediation recorded yet.

Weaknesses (1)

CWE-384

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-44168		Advisory
https://github.com/prasathmani/tinyfilemanager		Product
https://github.com/whitej3rry/CVE-2022-40916/blob/main/PoC.md		ExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Feb 6, 2025

Updated Feb 7, 2025

Reserved Sep 19, 2022

Updated Feb 7, 2025

Status Analyzed

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Feb 6, 2025

Updated Feb 7, 2025

Exploited since n/a