CVE-2022-50890

EUVD-2026-2649
Owlfiles File Manager 12.0.1 contains a path traversal vulnerability in its built-in HTTP server that allows attackers to access system directories. Attackers can exploit the vulnerability by crafting GET requests with directory traversal sequences to access restricted system directories on the device.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
VulnCheckCNA
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 61%
Affected Products (NVD)
VendorProductVersion
skyjosowlfiles
12.0.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://apps.apple.com/us/app/owlfiles-file-manager/id510282524
https://www.exploit-db.com/exploits/51036
https://www.skyjos.com/
https://www.vulncheck.com/advisories/owlfiles-file-manager-path-traversal
https://www.exploit-db.com/exploits/51036