JeeSite path traversal vulnerability

JeeSite is a Java rapid development platform open-sourced by Jinan Zhuoyuan thinkgem. Version JeeSite 5.15.1 contains a path traversal vulnerability, which stems from issues with the fileMd5 parameter in the /a/file/upload endpoint. This vulnerability could allow authenticated attackers with file...

EUVD-2025-200119

Gin-vue-admin has an arbitrary file deletion vulnerability...

CVE-2025-66410

CVE-2025-66410 affects gin-vue-admin (backend in github.com/flipped-aurora/gin-vue-admin) up to version 2.8.6. The vulnerability allows an attacker to delete arbitrary files/folders on the server by supplying a crafted FileMd5 value to the removeChunk endpoint (POST /api/fileUploadAndDownload/rem...

CVE-2025-66410 Gin-vue-admin has an arbitrary file deletion vulnerability

Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' parameter to delete any file and folder...