Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34134
HistoryFeb 10, 2022 - 8:31 a.m.

Authorization Bypass

2022-02-1008:31:22
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

0.001 Low

EPSS

Percentile

33.0%

github.com/flipped-aurora/gin-vue-admin is vulnerable to authorization bypass. The vulnerability exists in setuserinfo function of sys_user.go because the user roles are not properly authorized which allows a malicious user to modify any information of the administrator.

0.001 Low

EPSS

Percentile

33.0%