Improper Input Validation

Overview github.com/gin-gonic/gin is a package that implements a HTTP web framework called gin. Affected versions of this package are vulnerable to Improper Input Validation by allowing an attacker to use a specially crafted request via the X-Forwarded-Prefix header, potentially leading to cache...

Path Traversal in gin-vue-admin

In gin-vue-admin 2.5.5, the download module has a Path Traversal vulnerability...

GHSA-X623-HR8H-7G5V Path Traversal in gin-vue-admin

In gin-vue-admin 2.5.5, the download module has a Path Traversal vulnerability...

CVE-2022-47762

In gin-vue-admin 2.5.5, the download module has a Path Traversal vulnerability...

Path traversal

In gin-vue-admin 2.5.5, the download module has a Path Traversal vulnerability...

CVE-2022-47762

In gin-vue-admin 2.5.5, the download module has a Path Traversal vulnerability...

Gin-Vue-Admin 路径遍历漏洞

Gin-Vue-Admin is a full-stack pre-development infrastructure platform based on Vue and Gin development. A path traversal vulnerability exists in Gin-Vue-Admin versions before 2.5.5, which stems from a security issue in the downloadTemplate, ExportExcel interfaces, resulting in a path traversal...

CVE-2022-47762

In gin-vue-admin 2.5.5, the download module has a Path Traversal vulnerability...

CVE-2022-47762

In gin-vue-admin 2.5.5, the download module has a Path Traversal vulnerability...

CVE-2022-47762

The CVE-2022-47762 affects gin-vue-admin prior to 2.5.5. A Path Traversal vulnerability in the download module (related to downloadTemplate/ExportExcel) could allow an attacker to access sensitive data via the vulnerable download functionality. Reported impact includes potential data disclosure w...

PT-2023-15478 · Unknown · Gin-Vue-Admin

Name of the Vulnerable Software and Affected Versions: gin-vue-admin versions prior to 2.5.5 Description: The issue concerns a Path Traversal vulnerability in the download module. Recommendations: For versions prior to 2.5.5, update to version 2.5.5 or later to resolve the issue...

CVE-2022-47762: Improper Limitation of a Pathname to a Restricted Directory

In gin-vue-admin 2.5.5, the download module has a Path Traversal vulnerability...

Log Injection

github.com/gin-gonic/gin is vulnerable to log injection. The vulnerability exists in logger.go due to the lack of validation in library logs, which allows an attacker to inject malicious code into the system...

Gin's default logger allows unsanitized input that can allow remote attackers to inject arbitrary log lines

Gin is a HTTP web framework written in Go Golang. Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines...

GHSA-6VM3-JJ99-7229 Gin's default logger allows unsanitized input that can allow remote attackers to inject arbitrary log lines

Gin is a HTTP web framework written in Go Golang. Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines...

DEBIAN-CVE-2020-36567

Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines...

CVE-2020-36567

Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines...

UBUNTU-CVE-2020-36567

Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines...

CVE-2020-36567

Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines...

CVE-2020-36567 Arbitrary log line injection in github.com/gin-gonic/gin

Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines...