TI-2022-26710 CVE-2022-51022 · GHSA-g786-pwww-f3jp
Path traversal in YiShaAdmin lets attackers read and delete files
Priority HIGH 77
YiShaAdmin 2.2 through 3.1, fixed in commit 025b062, contains an unauthenticated path traversal vulnerability in the /admin/File/DownloadFile endpoint that allows attackers to read and delete arbitrary files via the file…