Skip to content
OpenAdvisories

Vendor

flipped-aurora

11 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.5

    gin-vue-admin through 2.9.2 Path Traversal via removePlugin Endpoint

    gin-vue-admin through 2.9.2 contains a path traversal vulnerability that allows authenticated administrators to recursively delete arbitrary directories by supplying traversal sequences in the pluginName parameter. Attackers can send a crafted POST request to…