CVE-2024-31457 gin-vue-admin background arbitrary code coverage vulnerability

gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. gin-vue-admin pseudoversion 0.0.0-20240407133540-7bc7c3051067, corresponding to version 2.6.1, has a code injection vulnerability in the backend. In the Plugin System - Plugi...

CVE-2024-31457 gin-vue-admin background arbitrary code coverage vulnerability

gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. gin-vue-admin pseudoversion 0.0.0-20240407133540-7bc7c3051067, corresponding to version 2.6.1, has a code injection vulnerability in the backend. In the Plugin System - Plugi...

CVE-2024-31457

Gin-vue-admin (CVE-2024-31457) has a backend code-injection risk via a directory-traversal flaw in the Plugin Template feature. The AutoPlug flow accepts PlugName, and through crafted input (e.g., ../../../server/ and related PoC payloads) an attacker can create or modify folders like api, config...

GHSA-GV3W-M57P-3WC4 gin-vue-admin background arbitrary code coverage vulnerability

Impact "gin-vue-admin Plugin Template feature, an attacker can perform directory traversal by manipulating the 'plugName' parameter. They can create specific folders such as 'api', 'config', 'global', 'model', 'router', 'service', and 'main.go' function within the specified traversal directory...

gin-vue-admin background arbitrary code coverage vulnerability

Impact "gin-vue-admin Plugin Template feature, an attacker can perform directory traversal by manipulating the 'plugName' parameter. They can create specific folders such as 'api', 'config', 'global', 'model', 'router', 'service', and 'main.go' function within the specified traversal directory...

PT-2024-24090 · Unknown · Gin-Vue-Admin

Name of the Vulnerable Software and Affected Versions: gin-vue-admin versions 2.6.1 and earlier Description: The issue is a code injection vulnerability in the backend of gin-vue-admin, specifically in the Plugin System - Plugin Template feature. An attacker can perform directory traversal by...

Gin-Vue-Admin 安全漏洞

Gin-Vue-Admin is a full-stack pre-development infrastructure platform based on Vue and Gin development. A security vulnerability exists in Gin-Vue-Admin v2.6.1 and earlier versions, which stems from a code injection vulnerability in the backend that can be exploited by an attacker to perform...

Path Traversal in gin-vue-admin

In gin-vue-admin 2.5.5, the download module has a Path Traversal vulnerability...

GHSA-X623-HR8H-7G5V Path Traversal in gin-vue-admin

In gin-vue-admin 2.5.5, the download module has a Path Traversal vulnerability...

CVE-2022-47762

In gin-vue-admin 2.5.5, the download module has a Path Traversal vulnerability...

Path traversal

In gin-vue-admin 2.5.5, the download module has a Path Traversal vulnerability...

CVE-2022-47762

In gin-vue-admin 2.5.5, the download module has a Path Traversal vulnerability...

Gin-Vue-Admin 路径遍历漏洞

Gin-Vue-Admin is a full-stack pre-development infrastructure platform based on Vue and Gin development. A path traversal vulnerability exists in Gin-Vue-Admin versions before 2.5.5, which stems from a security issue in the downloadTemplate, ExportExcel interfaces, resulting in a path traversal...

CVE-2022-47762

In gin-vue-admin 2.5.5, the download module has a Path Traversal vulnerability...

CVE-2022-47762

The CVE-2022-47762 affects gin-vue-admin prior to 2.5.5. A Path Traversal vulnerability in the download module (related to downloadTemplate/ExportExcel) could allow an attacker to access sensitive data via the vulnerable download functionality. Reported impact includes potential data disclosure w...

PT-2023-15478 · Unknown · Gin-Vue-Admin

Name of the Vulnerable Software and Affected Versions: gin-vue-admin versions prior to 2.5.5 Description: The issue concerns a Path Traversal vulnerability in the download module. Recommendations: For versions prior to 2.5.5, update to version 2.5.5 or later to resolve the issue...

CVE-2022-47762

In gin-vue-admin 2.5.5, the download module has a Path Traversal vulnerability...

Gin-vue-admin subject to Remote Code Execution via file upload vulnerability

Impact Gin-vue-admin 2.5.4 has File upload vulnerabilities。 File upload vulnerabilities are when a web server allows users to upload files to its filesystem without sufficiently validating things like their name, type, contents, or size. Failing to properly enforce restrictions on these could mea...

GHSA-7GC4-R5JR-9HXV Gin-vue-admin subject to Remote Code Execution via file upload vulnerability

Impact Gin-vue-admin 2.5.4 has File upload vulnerabilities。 File upload vulnerabilities are when a web server allows users to upload files to its filesystem without sufficiently validating things like their name, type, contents, or size. Failing to properly enforce restrictions on these could mea...

CVE-2022-39345

Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Gin-vue-admin prior to 2.5.4 is vulnerable to path traversal, which leads to file upload vulnerabilities. Version 2.5.4 contains a patch for this issue. There are no...