Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:35708
HistoryMay 26, 2022 - 3:57 a.m.

Arbitrary File Read

2022-05-2603:57:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
arbitrary file read
vulnerability
github repository
path value
sensitive information
file access

EPSS

0.002

Percentile

58.7%

github.com/gphper/ginadmin is vulnerable to arbitrary file read. The vulnerability exists in couple of functions in adminSystemController.go because the incoming path value is not filtered which allows an attacker to gain access to the files and read sensitive information.

EPSS

0.002

Percentile

58.7%

Related for VERACODE:35708