CVE-2022-51022 | YiShaAdmin up to 3.1 DownloadFile /admin/File/DownloadFile filePath path traversal

October 22, 2026 Yanac

A vulnerability described as critical has been identified in YiShaAdmin up to 3.1. This affects an unknown part of the file /admin/File/DownloadFile of the component DownloadFile. The manipulation of the argument filePath results in path traversal.

This vulnerability is reported as CVE-2022-51022. The attack can be launched remotely. No exploit exists.

It is best practice to apply a patch to resolve this issue.VulDB Recent EntriesRead More