Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-24843

Опубликовано: 13 апр. 2022
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Gin-vue-admin 2.50 has arbitrary file read vulnerability due to a lack of parameter validation. This has been resolved in version 2.5.1. There are no known workarounds for this issue.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:*:*:*:*:*:*:*:*
Версия до 2.5.1 (исключая)

EPSS

Процентиль: 71%
0.00658
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-22
CWE-22

EPSS

Процентиль: 71%
0.00658
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-22
CWE-22