Skip to content
OpenAdvisories

Vendor

flipped-aurora

11 known vulnerabilities.

Products

gin-vue-admin 11
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.4
    CVE-2026-48787

    gin-vue-admin vulnerable to RCE

    gin-vue-admin is an AI-assisted basic development platform. In version 2.9.1, an authenticated attacker with access to the code-generation feature and MCP management interface can exploit this vulnerability by injecting attacker-controlled Go source code thro…

    flipped-aurora gin-vue-admin
  • High 7.3
    CVE-2026-22786

    Gin-vue-admin has arbitrary file upload vulnerability caused by path traversal

    Gin-vue-admin is a backstage management system based on vue and gin. Gin-vue-admin <= v2.8.7 has a path traversal vulnerability in the breakpoint resume upload functionality. Attacker can upload any files on any directory. In the breakpoint_continue.go file, …

    flipped-aurora gin-vue-admin github.com/flipped-aurora/gin-vue-admin Go
  • High 8.7
    CVE-2025-66410

    Gin-vue-admin has an arbitrary file deletion vulnerability

    Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' parameter to delete any f…

    flipped-aurora gin-vue-admin github.com/flipped-aurora/gin-vue-admin Go
  • High 8.8
    CVE-2024-37896

    SQL injection vulnerability in Gin-vue-admin

    Gin-vue-admin is a backstage management system based on vue and gin. Gin-vue-admin <= v2.6.5 has SQL injection vulnerability. The SQL injection vulnerabilities occur when a web application allows users to input data into SQL queries without sufficiently valid…

    flipped-aurora gin-vue-admin github.com/flipped-aurora/gin-vue-admin Go
  • High 7.7
    CVE-2024-31457

    gin-vue-admin background arbitrary code coverage vulnerability

    gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. gin-vue-admin pseudoversion 0.0.0-20240407133540-7bc7c3051067, corresponding to version 2.6.1, has a code injection vulnerability in the…

    flipped-aurora gin-vue-admin github.com/flipped-aurora/gin-vue-admin/server Go
  • High 7.5
    CVE-2022-24843

    Path Traversal in github.com/flipped-aurora/gin-vue-admin

    Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Gin-vue-admin 2.50 has arbitrary file read vulnerability due to a lack of parameter validation. This has been resolved in version 2.5.1.…

    flipped-aurora gin-vue-admin
  • High 8.1
    CVE-2022-24844

    SQL Injection in github.com/flipped-aurora/gin-vue-admin

    Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. The problem occurs in the following code in server/service/system/sys_auto_code_pgsql.go, which means that PostgreSQL must be used as th…

    flipped-aurora gin-vue-admin
  • High 8.1
    CVE-2022-21660 Public exploit

    Missing authorization in gin-vue-admin

    Gin-vue-admin is a backstage management system based on vue and gin. In versions prior to 2.4.7 low privilege users are able to modify higher privilege users. Authentication is missing on the `setUserInfo` function. Users are advised to update as soon as poss…

    flipped-aurora gin-vue-admin