---
id: CVE-2022-51022
title: YiShaAdmin 3.1 Unauthenticated Path Traversal via DownloadFile endpoint
summary: >-
  YiShaAdmin 2.2 through 3.1, fixed in commit 025b062, contains an
  unauthenticated path traversal vulnerability in the /admin/File/DownloadFile
  endpoint that allows attackers to read and delete arbitrary files via the
  filePath parameter. A…
severity: critical
cvss: 9.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
cvssSource: cna
cwe:
  - CWE-22
vendor: liukuo362573
product: YiShaAdmin
affected:
  - YiShaAdmin >= 2.2 <= 3.1
published: '2026-10-22'
updated: '2026-10-22'
sourceUpdated: '2026-10-22T10:57:33.205Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2022-51022'
references:
  - url: 'https://huntr.com/bounties/2acdd87a-12bd-4ce4-994b-0081eb908128'
    label: huntr Report
  - url: >-
      https://github.com/liukuo362573/YiShaAdmin/commit/025b0628b1295bd2d9fd6c9b5b82692a345151ef
    label: Fix Commit
  - url: >-
      https://github.com/liukuo362573/YiShaAdmin/commit/c3b66e66bf6d70a561190cd8da7f4df7b141931d
    label: Incomplete Fix
  - url: >-
      https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/other/yishaadmin-lfi.yaml
    label: Nuclei Template
  - url: >-
      https://www.vulncheck.com/advisories/yishaadmin-3.1-unauthenticated-path-traversal-via-downloadfile-endpoint
    label: >-
      VulnCheck Advisory: YiShaAdmin 3.1 Unauthenticated Path Traversal via
      DownloadFile endpoint
tags:
  - cve.org
ingestedAt: '2026-10-22T11:37:02.341Z'
---

## Overview

YiShaAdmin 2.2 through 3.1, fixed in commit 025b062, contains an unauthenticated path traversal vulnerability in the /admin/File/DownloadFile endpoint that allows attackers to read and delete arbitrary files via the filePath parameter. Attackers can send crafted GET requests with directory traversal sequences in filePath and set the delete parameter to read or remove system files like etc/passwd. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-20.

## Affected

- `YiShaAdmin >= 2.2 <= 3.1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.