owlfiles vulnerabilities and fixes
Recent CVEs affecting owlfiles, with upgrade or downgrade steps. 2 tracked.
owlfiles has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-01-13. Highest priority: CVE-2022-50890 (score 53/100).
- CVE-2022-50891 MEDIUM 5.0 DOWNGRADE Owlfiles File Manager 12.0.1 contains a cross-site scripting vulnerability that allows attackers to inject mal
- CVE-2022-50890 HIGH 7.5 DOWNGRADE Owlfiles File Manager 12.0.1 contains a path traversal vulnerability in its built-in HTTP server that allows a
FAQ
How do I fix owlfiles vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is owlfiles being exploited right now?
None of the tracked owlfiles CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which owlfiles CVE should I patch first?
CVE-2022-50890 currently ranks highest (53/100): Owlfiles File Manager 12.0.1 contains a path traversal vulnerability in its built-in HTTP server that allows a.