All vulnerabilities
CVE-2022-51022

YiShaAdmin 3.1 Unauthenticated Path Traversal via DownloadFile endpoint

liukuo362573 YiShaAdmin
Open in ThreatlineRecord JSON
CVSS
8.8High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.79%Chance of exploitation activity in the next 30 days, higher than 55% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published22 Oct 2026Updated 22 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Description

YiShaAdmin 2.2 through 3.1, fixed in commit 025b062, contains an unauthenticated path traversal vulnerability in the /admin/File/DownloadFile endpoint that allows attackers to read and delete arbitrary files via the filePath parameter. Attackers can send crafted GET requests with directory traversal sequences in filePath and set the delete parameter to read or remove system files like etc/passwd. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-20.

Text from CVE List

Affected versions 2

  • YiShaAdminaffected: 2.2 through 3.1CVE List
  • YiShaAdminunaffected: 025b0628b1295bd2d9fd6c9b5b82692a345151efCVE List

References 5