CVE-2022-50950
Webile 1.0.1 Directory Traversal Vulnerability via Web Application
- State
- Published
- Severity
- 7.1 High
- Published
- Feb 1, 2026
- Updated
- Feb 2, 2026
- Reserved
- Jan 11, 2026
Description
Webile 1.0.1 contains a directory traversal vulnerability that allows remote attackers to manipulate file system paths without authentication. Attackers can exploit path manipulation to access sensitive system directories and potentially compromise the mobile device's local file system.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.1 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | VulnCheck |
Weaknesses
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected Products
| Product | Versions |
|---|---|
WebileProduct Owner: Webile |
|
References
- Vulnerability Lab Advisoryexploit
- Product Homepageproduct
- VulnCheck Advisory: Webile 1.0.1 Directory Traversal Vulnerability via Web Applicationthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.