CVE-2022-24843

2022-04-1322:15:08

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.7%

JSON

Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Gin-vue-admin 2.50 has arbitrary file read vulnerability due to a lack of parameter validation. This has been resolved in version 2.5.1. There are no known workarounds for this issue.

CPENameOperatorVersion
gin-vue-admineq2.4.6
gin-vue-admineq2.0.2
gin-vue-admineq2.3.6
gin-vue-admineq0.9.0
gin-vue-admineq2.3.0
gin-vue-admineq2.4.5
gin-vue-admineq2.5.0a
gin-vue-admineq.2.3.41
gin-vue-admineq2.0.4
gin-vue-admineq2.3.9

Name	Operator	Version
gin-vue-admin	eq	2.4.6
gin-vue-admin	eq	2.0.2
gin-vue-admin	eq	2.3.6
gin-vue-admin	eq	0.9.0
gin-vue-admin	eq	2.3.0
gin-vue-admin	eq	2.4.5
gin-vue-admin	eq	2.5.0a
gin-vue-admin	eq	.2.3.41
gin-vue-admin	eq	2.0.4
gin-vue-admin	eq	2.3.9