261 matches found
Path traversal
In gin-vue-admin 2.5.5, the download module has a Path Traversal vulnerability...
CVE-2022-47762
In gin-vue-admin 2.5.5, the download module has a Path Traversal vulnerability...
Gin-Vue-Admin 路径遍历漏洞
Gin-Vue-Admin is a full-stack pre-development infrastructure platform based on Vue and Gin development. A path traversal vulnerability exists in Gin-Vue-Admin versions before 2.5.5, which stems from a security issue in the downloadTemplate, ExportExcel interfaces, resulting in a path traversal...
CVE-2022-47762
In gin-vue-admin 2.5.5, the download module has a Path Traversal vulnerability...
CVE-2022-47762
In gin-vue-admin 2.5.5, the download module has a Path Traversal vulnerability...
PT-2023-15478 · Unknown · Gin-Vue-Admin
Name of the Vulnerable Software and Affected Versions: gin-vue-admin versions prior to 2.5.5 Description: The issue concerns a Path Traversal vulnerability in the download module. Recommendations: For versions prior to 2.5.5, update to version 2.5.5 or later to resolve the issue...
CVE-2022-47762
The CVE-2022-47762 affects gin-vue-admin prior to 2.5.5. A Path Traversal vulnerability in the download module (related to downloadTemplate/ExportExcel) could allow an attacker to access sensitive data via the vulnerable download functionality. Reported impact includes potential data disclosure w...
Log Injection
github.com/gin-gonic/gin is vulnerable to log injection. The vulnerability exists in logger.go due to the lack of validation in library logs, which allows an attacker to inject malicious code into the system...
Gin's default logger allows unsanitized input that can allow remote attackers to inject arbitrary log lines
Gin is a HTTP web framework written in Go Golang. Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines...
GHSA-6VM3-JJ99-7229 Gin's default logger allows unsanitized input that can allow remote attackers to inject arbitrary log lines
Gin is a HTTP web framework written in Go Golang. Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines...
DEBIAN-CVE-2020-36567
Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines...
CVE-2020-36567
Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines...
UBUNTU-CVE-2020-36567
Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines...
CVE-2020-36567
Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines...
CVE-2020-36567 Arbitrary log line injection in github.com/gin-gonic/gin
Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines...
CVE-2020-36567 Arbitrary log line injection in github.com/gin-gonic/gin
Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines...
Gin Web Framework 安全漏洞
Gin Web Framework is Gin-Gonic open source a web framework written in Go Golang. Gin Web Framework v1.6.0 before the version has a security vulnerability . Attackers can use the vulnerability to write arbitrary logs...
ferry 路径遍历漏洞
ferry is lanyulei personal developer based on Gin + Vue + Element UI front-end and back-end separation of the work order system. There is a path traversal vulnerability in ferry, which originates from some unknown functionality in the apis/process/task.go file and can be exploited by an attacker ...
Gin-vue-admin subject to Remote Code Execution via file upload vulnerability
Impact Gin-vue-admin 2.5.4 has File upload vulnerabilities。 File upload vulnerabilities are when a web server allows users to upload files to its filesystem without sufficiently validating things like their name, type, contents, or size. Failing to properly enforce restrictions on these could mea...
GHSA-7GC4-R5JR-9HXV Gin-vue-admin subject to Remote Code Execution via file upload vulnerability
Impact Gin-vue-admin 2.5.4 has File upload vulnerabilities。 File upload vulnerabilities are when a web server allows users to upload files to its filesystem without sufficiently validating things like their name, type, contents, or size. Failing to properly enforce restrictions on these could mea...