Priority LOW 31
gin-vue-admin through 2.9.2 contains a path traversal vulnerability that allows authenticated administrators to recursively delete arbitrary directories by supplying traversal sequences in the pluginName parameter.
CVSS 4.0HIGH 7.0· Network · High privileges · No interaction · EPSS 0.00511 · Published 2026-10-21 · No fix listed CWE-22
Priority HIGH 68
gin-vue-admin is an AI-assisted basic development platform.
CVSS 4.0HIGH 7.4· Network · Low privileges · No interaction · EPSS 0.00587 · Published 2026-06-19 · No fix listed CWE-78
Priority HIGH 67
Gin-vue-admin is a backstage management system based on vue and gin.
CVSS 4.0HIGH 7.3· Network · High privileges · No interaction · EPSS 0.01091 · Published 2026-01-12 · No fix listed CWE-22
Priority HIGH 71
Gin-vue-admin is a backstage management system based on vue and gin.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00621 · Published 2025-12-01 · Fixed in 0.9.1-0.20251201084432-ee8d8d7e04d9 CWE-22
Priority HIGH 73
Gin-vue-admin is a backstage management system based on vue and gin.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00513 · Published 2024-06-17 · Fixed in 2.6.6 CWE-89
Priority HIGH 67
gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack.
CVSS 3.1HIGH 7.7· Network · High privileges · No interaction · EPSS 0.00904 · Published 2024-04-09 · Fixed in 0.0.0-20240409100909-b1b7427c6ea6 CWE-22
Priority LOW 35
In gin-vue-admin < 2.5.5, the download module has a Path Traversal vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00928 · Published 2023-02-03 · Fixed in 2.5.5 CWE-22
Priority HIGH 82
Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0173 · Published 2022-10-25 · Fixed in 2.5.4 CWE-22
Priority HIGH 82
Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01341 · Published 2022-10-24 · No fix listed CWE-434
Priority HIGH 74
In "Gin-Vue-Admin", versions v2.5.1 through v2.5.3b are vulnerable to Unrestricted File Upload that leads to execution of javascript code, through the "Compress Upload" functionality to the Media Library.
CVSS 3.1CRITICAL 9.0· Network · Low privileges · User interaction · EPSS 0.013 · Published 2022-10-17 · No fix listed CWE-434
Priority HIGH 74
In "Gin-Vue-Admin", versions v2.5.1 through v2.5.3beta are vulnerable to Unrestricted File Upload that leads to execution of javascript code, through the 'Normal Upload' functionality to the Media Library.
CVSS 3.1CRITICAL 9.0· Network · Low privileges · User interaction · EPSS 0.013 · Published 2022-10-14 · No fix listed CWE-434
Priority MEDIUM 42
Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01544 · Published 2022-04-13 · Fixed in 2.5.1 CWE-22
Priority HIGH 73
Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01463 · Published 2022-04-13 · Fixed in 2.5.1 CWE-89
Priority HIGH 70
Gin-vue-admin is a backstage management system based on vue and gin.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01097 · Published 2022-02-09 · Fixed in 2.4.7 CWE-862
Priority MEDIUM 45
Gin-Vue-Admin before 2.4.6 mishandles a SQL database.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01303 · Published 2021-11-24 · No fix listed
THREATIST.IORead the docs