Skyjos vulnerabilities
Published CVEs affecting Skyjos products: 2 record(s), with severity, exploitation and fixes.
CVE-2022-50891
Medium · 5.0
CWE-79 Jan 13, 2026
Owlfiles File Manager 12.0.1 Cross-Site Scripting via HTTP Server
Owlfiles File Manager 12.0.1 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the path parameter in HTTP server endpoints. Attackers can craft URLs targeting the download and list endpoints with embedded script tags to execute arbitrary JavaScript in users' browsers.
CVE-2022-50890
High · 7.5
CWE-22 Jan 13, 2026
Owlfiles File Manager 12.0.1 - Path Traversal
Owlfiles File Manager 12.0.1 contains a path traversal vulnerability in its built-in HTTP server that allows attackers to access system directories. Attackers can exploit the vulnerability by crafting GET requests with directory traversal sequences to access restricted system directories on the device.