CVE-2022-50950

7.1 highEPSS 1.0%

High (7.1). EPSS 1.0% chance of exploitation in the next 30 days.

Webile 1.0.1 contains a directory traversal vulnerability that allows remote attackers to manipulate file system paths without authentication. Attackers can exploit path manipulation to access sensitive system directories and potentially compromise the mobile device's local file system.

Severity

CVSS 4.0

7.1 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2026-02-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://play.google.com/store/apps/details?id=com.techprd.filetransfer&hl=en_US
https://www.vulncheck.com/advisories/webile-directory-traversal-vulnerability-via-web-application
https://www.vulnerability-lab.com/get_content.php?id=2320

Check your stack JSON