🚨 Potential Security Vulnerability

[ranjit-git]

Hello, @prasathmani - 5 potential high severity security vulnerability in your repository has been disclosed to huntr.

Visit report url and validate them
https://www.huntr.dev/bounties/6-other-prasathmani/tinyfilemanager/
https://www.huntr.dev/bounties/7-other-prasathmani/tinyfilemanager/
https://www.huntr.dev/bounties/8-other-prasathmani/tinyfilemanager/
https://www.huntr.dev/bounties/9-other-prasathmani/tinyfilemanager/
https://www.huntr.dev/bounties/10-other-prasathmani/tinyfilemanager/

[zer0h-bb]

Hi @prasathmani, two other vulnerabilities were found in your repo, please check :

• https://huntr.dev/bounties/4-other-prasathmani/tinyfilemanager/
• https://huntr.dev/bounties/5-other-prasathmani/tinyfilemanager/
  Best regards,

[x3rz]

Hello @prasathmani, one more vulnerability was found in your code, visit and do check it.
https://www.huntr.dev/bounties/11-other-prasathmani/tinyfilemanager/

[ranjit-git]

Hello, i see it has been 6 month since bug reported and still many of them are not validated .
As fix taking long time so you can validate the report now and when patch is ready then you can confirm the fix also .
Huntr team did not proccessed the bounty to reporter untill it validated.
We invest our time to secure opensource project and report potential security vulnerability to huntr responsively .
If maintainer validate them then reporter gets bounty and it will encourage us to make opensource project a safer place .
Thanks

[michael-milette]

Have the security issues reported in CVE-2021-40965 5 months ago been addressed yet?

For more information, please see: https://www.cvedetails.com/cve/CVE-2021-40965/

[prasathmani]

not actively contributing now, will fix all this in future release

[prasathmani]

fix to path traversal vulnerability #718. by @joaogmauricio

[ranjit-git]

Hello, @prasathmani - 5 potential high severity security vulnerability in your repository has been disclosed to huntr.

Visit report url and validate them https://www.huntr.dev/bounties/6-other-prasathmani/tinyfilemanager/ https://www.huntr.dev/bounties/7-other-prasathmani/tinyfilemanager/ https://www.huntr.dev/bounties/8-other-prasathmani/tinyfilemanager/ https://www.huntr.dev/bounties/9-other-prasathmani/tinyfilemanager/ https://www.huntr.dev/bounties/10-other-prasathmani/tinyfilemanager/

@prasathmani
Can you plz validate/invalidate those report in huntr so that huntr can give bounty?

[x3rz]

Not only these but all mentioned report
thanks

[prasathmani]

This issue is addressed in the new release.

[michael-milette]

Thank you @prasathmani !