Live › vulnerability › CVE-2022-51022
Go to dashboardYiShaAdmin versions 2.2 through 3.1 let anyone send a crafted GET request to /admin/File/DownloadFile and traverse the filePath parameter. An attacker can read arbitrary files such as /etc/passwd and, with the delete parameter set, remove them.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| YiShaAdmin | github | >= 2.2, <= 3.1 | commit 025b0628b1295bd2d9fd6c9b5b82692a345151ef |
Check whether the deployed YiShaAdmin version is between 2.2 and 3.1 inclusive, or whether it predates commit 025b0628b1295bd2d9fd6c9b5b82692a345151ef.
Update YiShaAdmin to a build that includes commit 025b0628b1295bd2d9fd6c9b5b82692a345151ef or later.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
YiShaAdmin 2.2 through 3.1, fixed in commit 025b062, contains an unauthenticated path traversal vulnerability in the /admin/File/DownloadFile endpoint that allows attackers to read and delete arbitrary files via the filePath parameter. Attackers can send crafted GET requests with directory traversal sequences in filePath and set the delete parameter to read or remove system files like etc/passwd. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-20.
This page as .md · .json · in your agent: get_signal("CVE-2022-51022")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.