CVE-2022-51022
YiShaAdmin 3.1 Unauthenticated Path Traversal via DownloadFile endpoint
CVSS Score
9.1
EPSS Score
0.0%
EPSS Percentile
0th
YiShaAdmin 2.2 through 3.1, fixed in commit 025b062, contains an unauthenticated path traversal vulnerability in the /admin/File/DownloadFile endpoint that allows attackers to read and delete arbitrary files via the filePath parameter. Attackers can send crafted GET requests with directory traversal sequences in filePath and set the delete parameter to read or remove system files like etc/passwd. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-20.
| CWE | CWE-22 |
| Vendor | liukuo362573 |
| Product | yishaadmin |
| Published | Oct 22, 2026 |
Stay Ahead of the Next One
Get instant alerts for liukuo362573 yishaadmin
Be the first to know when new critical vulnerabilities affecting liukuo362573 yishaadmin are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
High
Affected Versions
liukuo362573 / YiShaAdmin
2.2 ≤ 3.1
References
huntr.com: https://huntr.com/bounties/2acdd87a-12bd-4ce4-994b-0081eb908128 github.com: https://github.com/liukuo362573/YiShaAdmin/commit/025b0628b1295bd2d9fd6c9b5b82692a345151ef github.com: https://github.com/liukuo362573/YiShaAdmin/commit/c3b66e66bf6d70a561190cd8da7f4df7b141931d github.com: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/other/yishaadmin-lfi.yaml vulncheck.com: https://www.vulncheck.com/advisories/yishaadmin-3.1-unauthenticated-path-traversal-via-downloadfile-endpoint
Credits
🔍 The Shadowserver Foundation