CyberSecBulletin

Gin-vue-admin vulnerabilities

We track 2 vulnerabilities in Gin-vue-admin products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 17, 2022.

2vulnerabilities
2critical
0high
0exploited
9.0average CVSS score

Latest Gin-vue-admin vulnerabilities

  • 9.0 Critical severity

    gin-vue-admin: Unrestricted Upload of File with Dangerous Type

    CVE-2022-32176Gin-vue-adminEPSS 1.3%

    In "Gin-Vue-Admin", versions v2.5.1 through v2.5.3b are vulnerable to Unrestricted File Upload that leads to execution of javascript code, through the "Compress Upload" functionality to the Media Library. When an admin user views the uploaded file, a low privi

  • 9.0 Critical severity

    gin-vue-admin: Unrestricted Upload of File with Dangerous Type

    CVE-2022-32177Gin-vue-adminEPSS 1.3%

    In "Gin-Vue-Admin", versions v2.5.1 through v2.5.3beta are vulnerable to Unrestricted File Upload that leads to execution of javascript code, through the 'Normal Upload' functionality to the Media Library. When an admin user views the uploaded file, a low priv