Description
In ginadmin through 05-10-2022, the incoming path value is not filtered, resulting in arbitrary file reading.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/gphper/ginadmin | <= 0.1.1 | — | GHSA-5824-6jfv-xr3r |
High · 7.5
CVE-2022-30428
EUVD-2022-2527GHSA-5824-6jfv-xr3r
Arbitrary file read in ginadmin
Published May 25, 2022 · Updated Aug 3, 2024 · Assigned by mitre