CVE-2022-30428

CVE-2022-30428 affects ginadmin (up to 05-10-2022). The vulnerability arises from an unfiltered incoming path value, allowing an arbitrary file read from the server. Affected component appears to be the admin/system handling path input; the issue enables access to sensitive files, as described co...

CVE-2022-30427

Ginadmin (backend admin platform built on the Gin framework) is affected by CVE-2022-30427 due to an unfiltered incoming path value in the View function, causing directory traversal. A patch is noted on the master branch in the GHSA advisory; other sources corroborate the vulnerability descriptio...