CVE-2022-21660

Gin-vue-admin, a Vue/Gin-based backstage management system, is vulnerable prior to version 2.4.7 due to missing authentication on the SetUserInfo endpoint, allowing a low-privilege user to modify higher-privilege accounts. The issue stems from not validating the target user ID in SetUserInfo, com...

Gin-Vue-Admin 权限许可和访问控制问题漏洞

Gin-Vue-Admin is a full-stack pre-development infrastructure platform based on Vue and Gin development. A permission permission and access control issue vulnerability exists in gin-vue-admin, which stems from a lack of authentication in the setUserInfo function, which allows a low-privileged user...

CVE-2022-21660: Missing Authorization

Gin-vue-admin is a backstage management system based on vue and gin. In versions prior to 2.4.7 low privilege users are able to modify higher privilege users. Authentication is missing on the setUserInfo function. Users are advised to update as soon as possible. There are no known workarounds...

Exploit for Missing Authorization in Gin-Vue-Admin_Project Gin-Vue-Admin

Gin-Vue-admin Vertical Override Vulnerability and Code Analy...

CVE-2021-45232

In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework droplet on the basis of framework gin, all APIs and authentication middleware are developed based on framework droplet, but some API directly use the interface of framework gin thus bypassing th...

CVE-2021-45232

In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework droplet on the basis of framework gin, all APIs and authentication middleware are developed based on framework droplet, but some API directly use the interface of framework gin thus bypassing th...

CVE-2021-45232

In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework droplet on the basis of framework gin, all APIs and authentication middleware are developed based on framework droplet, but some API directly use the interface of framework gin thus bypassing th...

Authentication flaw

In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework droplet on the basis of framework gin, all APIs and authentication middleware are developed based on framework droplet, but some API directly use the interface of framework gin thus bypassing th...

CVE-2021-45232 security vulnerability on unauthorized access.

In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework droplet on the basis of framework gin, all APIs and authentication middleware are developed based on framework droplet, but some API directly use the interface of framework gin thus bypassing th...

PT-2021-6081 · Apache · Apache Apisix Dashboard

Name of the Vulnerable Software and Affected Versions: Apache APISIX Dashboard versions prior to 2.10.1 Description: The issue is related to the Manager API in Apache APISIX Dashboard, which uses two frameworks, gin and droplet. While all APIs and authentication middleware are developed based on...

CVE-2021-45232: Missing Authentication for Critical Function

In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework droplet on the basis of framework gin, all APIs and authentication middleware are developed based on framework droplet, but some API directly use the interface of framework gin thus bypassing th...

CVE-2021-44219

Gin-Vue-Admin before 2.4.6 mishandles a SQL database...

CVE-2021-44219

Gin-Vue-Admin before 2.4.6 mishandles a SQL database...

CVE-2021-44219

Gin-Vue-Admin before 2.4.6 mishandles a SQL database...

Sql injection

Gin-Vue-Admin before 2.4.6 mishandles a SQL database...

CVE-2021-44219

Gin-Vue-Admin before 2.4.6 is affected by an SQL injection flaw stemming from mishandling the SQL database. The vulnerability affects the GetAPIInfoList path via the order parameter, enabling attackers to inject and execute arbitrary SQL statements. This is identified across multiple feeds (e.g.,...

CVE-2021-44219

Gin-Vue-Admin before 2.4.6 mishandles a SQL database...

Gin-Vue-Admin 安全漏洞

Gin-Vue-Admin is a full-stack pre-development infrastructure platform based on Vue and Gin development. A security vulnerability exists in Gin-Vue-Admin versions prior to 2.4.6 that stems from a processing SQL database error...

CVE-2021-44219: Undefined Security Weakness

Gin-Vue-Admin before 2.4.6 mishandles a SQL database...

Inconsistent Interpretation of HTTP Requests in github.com/gin-gonic/gin

When gin is exposed directly to the internet, a client's IP can be spoofed by setting the X-Forwarded-For header. This affects all versions of package github.com/gin-gonic/gin under 1.7.7...