Vendors / flipped-aurora Records 15 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 5
CVSS high 10
Exploited now flipped-aurora records in CISA KEV No flipped-aurora vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0173 · Published 2022-10-25 · Fixed in 2.5.4 CWE-22
Priority HIGH 82
Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01341 · Published 2022-10-24 · No fix listed CWE-434
Priority HIGH 74
In "Gin-Vue-Admin", versions v2.5.1 through v2.5.3beta are vulnerable to Unrestricted File Upload that leads to execution of javascript code, through the 'Normal Upload' functionality to the Media Library.
CVSS 3.1 CRITICAL 9.0· Network · Low privileges · User interaction · EPSS 0.013 · Published 2022-10-14 · No fix listed CWE-434
Priority HIGH 74
In "Gin-Vue-Admin", versions v2.5.1 through v2.5.3b are vulnerable to Unrestricted File Upload that leads to execution of javascript code, through the "Compress Upload" functionality to the Media Library.
CVSS 3.1 CRITICAL 9.0· Network · Low privileges · User interaction · EPSS 0.013 · Published 2022-10-17 · No fix listed CWE-434
Priority HIGH 73
Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01463 · Published 2022-04-13 · Fixed in 2.5.1 CWE-89
Priority HIGH 71
Gin-vue-admin is a backstage management system based on vue and gin.
CVSS 4.0 HIGH 8.7· Network · No auth · No interaction · EPSS 0.00621 · Published 2025-12-01 · Fixed in 0.9.1-0.20251201084432-ee8d8d7e04d9 CWE-22
Priority HIGH 70
Gin-vue-admin is a backstage management system based on vue and gin.
CVSS 3.1 HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01097 · Published 2022-02-09 · Fixed in 2.4.7 CWE-862
Priority HIGH 67
Gin-vue-admin is a backstage management system based on vue and gin.
CVSS 4.0 HIGH 7.3· Network · High privileges · No interaction · EPSS 0.01091 · Published 2026-01-12 · No fix listed CWE-22
Priority MEDIUM 45
Gin-Vue-Admin before 2.4.6 mishandles a SQL database.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01303 · Published 2021-11-24 · No fix listed
Priority MEDIUM 42
Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01544 · Published 2022-04-13 · Fixed in 2.5.1 CWE-22
Priority LOW 35
In gin-vue-admin < 2.5.5, the download module has a Path Traversal vulnerability.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00928 · Published 2023-02-03 · Fixed in 2.5.5 CWE-22
Open these records in search → All records by CVSS severity
5 10 0 0 0
THREATIST.IORead the docs