CVE-2022-50890
Owlfiles File Manager 12.0.1 - Path Traversal
- State
- Published
- Severity
- 8.7 High
- Published
- Jan 13, 2026
- Updated
- Apr 7, 2026
- Reserved
- Jan 10, 2026
Description
Owlfiles File Manager 12.0.1 contains a path traversal vulnerability in its built-in HTTP server that allows attackers to access system directories. Attackers can exploit the vulnerability by crafting GET requests with directory traversal sequences to access restricted system directories on the device.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | VulnCheck |
Weaknesses
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected Products
| Product | Versions |
|---|---|
Owlfiles File ManagerSkyjos |
|
References
- ExploitDB-51036exploit
- Vendor Homepageproduct
- Official App Store Listingproduct
- VulnCheck Advisory: Owlfiles File Manager 12.0.1 - Path Traversalthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.