CVE-2020-22550

HIGH 7.5CVE-2020-22550 · Published 04/01/2021 · updated 17/06/2026

In short

CVE-2020-22550 is a HIGH (CVSS 7.5) vulnerability affecting veno file manager (veno file manager project).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
veno file manager veno_file_manager_project	`= 3.5.6`	No fix yet

Description

Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to download sensitive files from the server.

References

codecanyon.net/item/veno-file-manager-host-and-share-files/6114247 · Product
gist.github.com/Sp3eD-X/22640377f96340544baf12891f708b8f · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free