HIGH
liukuo362573
CVE published 2026-10-22
CVE-2022-51022
CVE-2022-51022 is a high-severity vulnerability in YiShaAdmin versions 2.2 through 3.1. An unauthenticated path traversal vulnerability exists in the /admin/File/DownloadFile endpoint, allowing attackers to read and delete arbitrary files via the filePath parameter. The vulnerability was fixed in commit 025b0628b1295bd2d9fd6c9b5b82692a345151ef. Defenders should assess exposure and apply the patch due to t [truncated]