CVE-2022-1000

CVE-2022-1000 is a critical path traversal vulnerability affecting prasathmani/tinyfilemanager versions prior to 2.4.7. This flaw allows an unauthenticated attacker to access arbitrary files and directories on the server, potentially leading to full system compromise. With a CVSS score of 9.8, it presents a high risk due to its network-based attack vector, low complexity, and severe impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation, nor publicly available exploit code in common frameworks, the vulnerability has garnered some community discussion.