Vulnerability Details CVE-2022-24843
Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Gin-vue-admin 2.50 has arbitrary file read vulnerability due to a lack of parameter validation. This has been resolved in version 2.5.1. There are no known workarounds for this issue.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.2%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- https://github.com/flipped-aurora/gin-vue-admin/issues/1002
- https://github.com/flipped-aurora/gin-vue-admin/pull/1024
- https://github.com/flipped-aurora/gin-vue-admin/security/advisories/GHSA-32gq-gj42-mw43
- https://github.com/flipped-aurora/gin-vue-admin/issues/1002
- https://github.com/flipped-aurora/gin-vue-admin/pull/1024
- https://github.com/flipped-aurora/gin-vue-admin/security/advisories/GHSA-32gq-gj42-mw43
Products affected by CVE-2022-24843
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:0.9.0
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.0.0
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.0.2
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.0.3
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.0.4
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.1.0
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.2.0
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.3.0
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.3.1
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.3.3
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.3.31
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.3.4
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.3.41
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.3.5
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.3.6
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.3.7
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.3.8
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.3.9
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.4.0
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.4.1
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.4.2
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.4.3
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.4.4
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.4.5
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.4.6
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.5.0
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.5.0a
-
cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:2.5.0b