CVE-2022-50890CWE-22

Owlfiles File Manager 12.0.1 - Path Traversal

High · published January 13, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
65.6
In the wild
Unconfirmed
What it is

🚨 A sneaky path traversal in Owlfiles File Manager 12.0.1 could let attackers waltz right into your system directories! ⚡ Think of it like a delivery driver with a poorly written address that leads them to the back rooms of a warehouse instead of the front desk — with a path traversal, attackers can access sensitive areas of your system that should be off-limits! This vulnerability could allow attackers to peek into restricted directories, exposing critical files and potentially leading to data breaches or system manipulation. If exploited, it could be a gateway for further attacks, compromising your entire environment, which is absolutely devastating!

Put simply

Think of it like a delivery driver with a poorly written address that leads them to the back rooms of a warehouse instead of the front desk — with a path traversal, attackers can access sensitive areas of your system that should be off-limits! The vulnerability allows attackers to craft GET requests with directory traversal sequences to access sensitive system directories that should be protected from unauthorized access.

What to do

This vulnerability could allow attackers to peek into restricted directories, exposing critical files and potentially leading to data breaches or system manipulation. If exploited, it could be a gateway for further attacks, compromising your entire environment, which is absolutely devastating! To secure your system, upgrade Owlfiles File Manager to the patched version immediately. Additionally, review your server configurations to ensure they restrict access to critical directories and consider implementing additional input validation to prevent path traversal attacks. 🛡️ You've got this! By taking these steps, you can tighten your defenses and keep your system safe and sound! 💪✨

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.01107 · 65.6th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-01-13T22:51Z
EPSS history
Timeline
  • 13 JAN 22:51Z
    Owlfiles File Manager 12.0.1 - Path Traversal
    cvelistv5