← Back

Owlfiles

owlfiles

Vendor: Skyjos • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-50891
1Skyjos
1Owlfiles
Jun 17, 2026
Jan 13, 2026
5.1 MEDIUM· v4
6.1 MEDIUM· v3
N/A· v2
Owlfiles File Manager 12.0.1 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the path parameter in HTTP server endpoints. Attackers can craft URLs targeting the dow...Show more
Owlfiles File Manager 12.0.1 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the path parameter in HTTP server endpoints. Attackers can craft URLs targeting the download and list endpoints with embedded script tags to execute arbitrary JavaScript in users' browsers.Show less
CVE-2022-50890
1Skyjos
1Owlfiles
Jun 17, 2026
Jan 13, 2026
8.7 HIGH· v4
7.5 HIGH· v3
N/A· v2
Owlfiles File Manager 12.0.1 contains a path traversal vulnerability in its built-in HTTP server that allows attackers to access system directories. Attackers can exploit the vulnerability by crafting GET requests with d...Show more
Owlfiles File Manager 12.0.1 contains a path traversal vulnerability in its built-in HTTP server that allows attackers to access system directories. Attackers can exploit the vulnerability by crafting GET requests with directory traversal sequences to access restricted system directories on the device.Show less