Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-50891 1 Skyjos 1 Owlfiles File Manager 2026-01-14 6.2 Medium
Owlfiles File Manager 12.0.1 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the path parameter in HTTP server endpoints. Attackers can craft URLs targeting the download and list endpoints with embedded script tags to execute arbitrary JavaScript in users' browsers.
CVE-2022-50890 1 Skyjos 1 Owlfiles File Manager 2026-01-14 7.5 High
Owlfiles File Manager 12.0.1 contains a path traversal vulnerability in its built-in HTTP server that allows attackers to access system directories. Attackers can exploit the vulnerability by crafting GET requests with directory traversal sequences to access restricted system directories on the device.