Vendor
flipped-aurora
11 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 6.5
gin-vue-admin through 2.9.2 Path Traversal via removePlugin Endpoint
gin-vue-admin through 2.9.2 contains a path traversal vulnerability that allows authenticated administrators to recursively delete arbitrary directories by supplying traversal sequences in the pluginName parameter. Attackers can send a crafted POST request to…