Lucene search
K

7 matches found

SUSE CVE
SUSE CVE
added 2026/01/27 12:27 a.m.4 views

SUSE CVE-2026-22786

Gin-vue-admin is a backstage management system based on vue and gin. Gin-vue-admin = v2.8.7 has a path traversal vulnerability in the breakpoint resume upload functionality. Attacker can upload any files on any directory. In the breakpointcontinue.go file, the MakeFile function accepts a fileName...

8.6CVSS5.9AI score0.00938EPSS
Exploits1References2
EUVD
EUVD
added 2026/01/13 7:15 p.m.4 views

EUVD-2026-2000

Gin-vue-admin has arbitrary file upload vulnerability caused by path traversal...

8.6CVSS6.7AI score0.00938EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2026/01/13 7:15 p.m.13 views

Gin-vue-admin has arbitrary file upload vulnerability caused by path traversal

Impact Gin-vue-admin = v2.8.7 has a path traversal vulnerability in the breakpoint resume upload functionality. Attacker can upload any files on any directory. Path traversal vulnerabilities occur when a web application accepts user-supplied file paths without proper validation, allowing attacker...

8.6CVSS7.6AI score0.00938EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2026/01/12 10:16 p.m.9 views

CVE-2026-22786

Gin-vue-admin is a backstage management system based on vue and gin. Gin-vue-admin = v2.8.7 has a path traversal vulnerability in the breakpoint resume upload functionality. Attacker can upload any files on any directory. In the breakpointcontinue.go file, the MakeFile function accepts a fileName...

8.6CVSS0.00938EPSS
Exploits1References2
Snyk
Snyk
added 2026/01/12 10:4 p.m.1 views

Arbitrary File Upload

Overview github.com/flipped-aurora/gin-vue-admin/server/utils is a Vue-based admin system Affected versions of this package are vulnerable to Arbitrary File Upload via the MakeFile function in the breakpoint resume upload process. An attacker can write arbitrary files to any directory by supplyin...

8.6CVSS7.2AI score0.00938EPSS
Exploits1References2
OSV
OSV
added 2026/01/12 9:9 p.m.3 views

CVE-2026-22786 Gin-vue-admin has arbitrary file upload vulnerability caused by path traversal

Gin-vue-admin is a backstage management system based on vue and gin. Gin-vue-admin = v2.8.7 has a path traversal vulnerability in the breakpoint resume upload functionality. Attacker can upload any files on any directory. In the breakpointcontinue.go file, the MakeFile function accepts a fileName...

8.6CVSS6.8AI score0.00938EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/01/12 12:0 a.m.5 views

PT-2026-2304

Name of the Vulnerable Software and Affected Versions Gin-vue-admin versions prior to 2.8.8 Description Gin-vue-admin, a backstage management system based on vue and gin, contains a path traversal issue in the breakpoint resume upload functionality. The vulnerability exists because the MakeFile...

8.6CVSS6.9AI score0.00938EPSS
Exploits1References10
Rows per page
Query Builder