starred/tinyfilemanager
1
0
Fork 0
mirror of https://github.com/prasathmani/tinyfilemanager.git synced 2026-04-27 03:15:50 +03:00
Code Issues 253 Projects Releases 5 Packages Wiki Activity

[GH-ISSUE #1366] Vulnerability Report: SSRF and Blacklist Bypass leading to Denial of Service (DoS) in TinyFileManager v2.6 #868

New issue
Open
opened 2026-03-02 16:01:54 +03:00 by kerem · 0 comments
kerem commented 2026-03-02 16:01:54 +03:00
Owner
Copy link

Originally created by @Maalfer on GitHub (Jan 1, 2026).
Original GitHub issue: https://github.com/prasathmani/tinyfilemanager/issues/1366

TinyFileManager v2.6 is vulnerable to Server-Side Request Forgery (SSRF), I sent a report at security section of this repo.

Regards!

Originally created by @Maalfer on GitHub (Jan 1, 2026). Original GitHub issue: https://github.com/prasathmani/tinyfilemanager/issues/1366 TinyFileManager v2.6 is vulnerable to Server-Side Request Forgery (SSRF), I sent a report at security section of this repo. Regards!
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
master
prasathmani-patch-1
offline
add-license-1
2.6
2.5.3
2.5.0
2.4.7
2.4.3
2.4.1
2.4.0
2.3.8
2.3.4
2.3
2.2.0
2.0.2
2.0.1
Labels
Clear labels   
Feature

   
Feature

   
Is It Really an Issue?

   
Need More Info

   
Request

   
Security

   
bug

   
duplicate

   
enhancement

   
enhancement

   
help wanted

   
invalid

   
pull-request

Mirrored from GitHub Pull Request

  
question

   
suggestion

   
wontfix
No labels
Feature
Feature
Is It Really an Issue?
Need More Info
Request
Security
bug
duplicate
enhancement
enhancement
help wanted
invalid
pull-request
question
suggestion
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/tinyfilemanager#868
No description provided.