github.com/flipped-aurora/gin-vue-admin

4 results · Feed

• High 7.3
  CVE-2026-22786

  Gin-vue-admin has arbitrary file upload vulnerability caused by path traversal

  Gin-vue-admin is a backstage management system based on vue and gin. Gin-vue-admin <= v2.8.7 has a path traversal vulnerability in the breakpoint resume upload functionality. Attacker can upload any files on any directory. In the breakpoint_continue.go file, …

  flipped-aurora gin-vue-admin github.com/flipped-aurora/gin-vue-admin Go
  Jan 12, 2026
• High 8.7
  CVE-2025-66410

  Gin-vue-admin has an arbitrary file deletion vulnerability

  Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' parameter to delete any f…

  flipped-aurora gin-vue-admin github.com/flipped-aurora/gin-vue-admin Go
  Dec 1, 2025
• High 8.8
  CVE-2024-37896

  SQL injection vulnerability in Gin-vue-admin

  Gin-vue-admin is a backstage management system based on vue and gin. Gin-vue-admin <= v2.6.5 has SQL injection vulnerability. The SQL injection vulnerabilities occur when a web application allows users to input data into SQL queries without sufficiently valid…

  flipped-aurora gin-vue-admin github.com/flipped-aurora/gin-vue-admin Go
  Jun 17, 2024
• High 7.5
  CVE-2022-47762

  Path Traversal in gin-vue-admin

  In gin-vue-admin < 2.5.5, the download module has a Path Traversal vulnerability.

  github.com/flipped-aurora/gin-vue-admin Go
  Feb 3, 2023