Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

11 records

Vendor: flipped-aurora Component: Gin-vue-admin Clear all filters
TI-2022-13902 CVE-2022-32176 · GHSA-5qph-282w-wqm2

Gin-vue-admin - Unrestricted File Upload

Priority HIGH 74

In "Gin-Vue-Admin", versions v2.5.1 through v2.5.3b are vulnerable to Unrestricted File Upload that leads to execution of javascript code, through the "Compress Upload" functionality to the Media Library.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.013 Published 2022-10-17 No fix listed CWE-434
TI-2022-13903 CVE-2022-32177 · GHSA-ppw7-v579-v4cr

Gin-vue-admin - Unrestricted File Upload

Priority HIGH 74

In "Gin-Vue-Admin", versions v2.5.1 through v2.5.3beta are vulnerable to Unrestricted File Upload that leads to execution of javascript code, through the 'Normal Upload' functionality to the Media Library.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.013 Published 2022-10-14 No fix listed CWE-434
TI-2022-08656 CVE-2022-24844

SQL Injection in github.com/flipped-aurora/gin-vue-admin

Priority HIGH 73

Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01463 Published 2022-04-13 Fixed in 2.5.1 CWE-89
TI-2022-06038 CVE-2022-21660

Missing authorization in gin-vue-admin

Priority HIGH 70

Gin-vue-admin is a backstage management system based on vue and gin.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01097 Published 2022-02-09 Fixed in 2.4.7 CWE-862