Advisories · Technology
flipped-aurora gin-vue-admin.
Every CVE that names flipped-aurora gin-vue-admin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.0 High
gin-vue-admin through 2.9.2 Path Traversal via removePlugin Endpoint
- flipped-aurora gin-vue-admin
- Path traversal
- CVSS 7.4 High
gin-vue-admin vulnerable to RCE
- flipped-aurora gin-vue-admin
- Command injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Gin-vue-admin vulnerable to Unrestricted Upload of File with Dangerous Type
- flipped-aurora gin-vue-admin
- Unrestricted file upload
- CVSS 7.5 High
Path Traversal in github.com/flipped-aurora/gin-vue-admin
- flipped-aurora gin-vue-admin
- Path traversal
- CVSS 8.1 High
SQL Injection in github.com/flipped-aurora/gin-vue-admin
- flipped-aurora gin-vue-admin
- SQL injection
- CVSS 8.1 High
Missing authorization in gin-vue-admin
- flipped-aurora gin-vue-admin
- Broken access control