CVE-2022-39305

Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Versions prior to 2.5.4 contain a file upload ability. The affected code fails to validate fileMd5 and fileName parameters, resulting in an arbitrary file being read. This...

CVE-2022-39305 Gin-vue-admin vulnerable to Unrestricted Upload of File with Dangerous Type

Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Versions prior to 2.5.4 contain a file upload ability. The affected code fails to validate fileMd5 and fileName parameters, resulting in an arbitrary file being read. This...

CVE-2022-39305

CVE-2022-39305 affects Gin-vue-admin prior to 2.5.4. The flaw is due to inadequate validation of fileMd5 and fileName during file upload, allowing an arbitrary file to be read. The issue is fixed in version 2.5.4b. Affected: Gin-vue-admin versions before 2.5.4. No exploitation details are provide...