CVE-2022-50890

Owlfiles File Manager 12.0.1 contains a path traversal vulnerability in its built-in HTTP server that allows attackers to access system directories. Attackers can exploit the vulnerability by crafting GET requests with directory traversal sequences to access restricted system directories on the device.

CVSS v4.0

8.7 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.99% chance of exploitation in the next 30 days, 60th percentile

Published

2026-01-13

Updated

2026-04-07

Proof-of-concept exploits (2)

• https://www.exploit-db.com/exploits/51036
• TereshkinVS/TereshkinVS_DZ10

References

• CVE Record
• NVD entry

Related

• CVE-2022-50808
• CVE-2022-50891
• CVE-2022-50806
• CVE-2022-50892
• CVE-2022-50805
• CVE-2022-50893