Path Traversal in github.com/flipped-aurora/gin-vue-admin
CVE-2022-24843

7.5HIGH

Key Information:

Vendor: Flipped-aurora
Status: Gin-vue-admin
Vendor: CVE Published:; 13 April 2022

🔔 Create Flipped-aurora Vulnerability Alert

What is CVE-2022-24843?

Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Gin-vue-admin 2.50 has arbitrary file read vulnerability due to a lack of parameter validation. This has been resolved in version 2.5.1. There are no known workarounds for this issue.