MineAdmin vulnerabilities
We track 5 vulnerabilities in MineAdmin products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on September 30, 2026.
Latest MineAdmin vulnerabilities
- 8.7 High severity
MineAdmin: Improper Limitation of a Pathname to a Restricted Directory
MineAdmin is a ready-to-use backend management system suitable for quickly building website backends, operation platforms, permission centers, internal management systems, CMS, CRM, OA, ERP and other business applications. Prior to version 3.2.0-alpha.2, the a
- 7.5 High severity
MineAdmin: Insufficient Verification of Data Authenticity
A weakness has been identified in MineAdmin 1.x/2.x. This impacts the function refresh of the file /system/refresh of the component JWT Token Handler. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attac
- 7.5 High severity
MineAdmin: Exposure of Sensitive Information to an Unauthorized Actor
A security flaw has been discovered in MineAdmin 1.x/2.x. This affects an unknown function of the component Swagger. The manipulation results in information disclosure. The attack may be performed from remote. The exploit has been released to the public and ma
- 8.8 High severity
MineAdmin: Incorrect Privilege Assignment
A vulnerability was identified in MineAdmin 1.x/2.x. The impacted element is an unknown function of the file /system/cache/view of the component View Interface. The manipulation leads to improper authorization. The attack is possible to be carried out remotely
- 9.8 Critical severity
Mineadmin: Improper Control of Generation of Code
Insecure permissions in the scheduled tasks feature of MineAdmin v3.x allows attackers to execute arbitrary commands and execute a full account takeover.