Gin-vue-admin Project
Gin-vue-admin Project Gin-vue-admin: vulnerabilidades y CVE
Gin-vue-admin Project Gin-vue-admin tiene 11 vulnerabilidades publicadas, 2 de ellas en los últimos 12 meses. 4 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE11
Últimos 12 meses2
Críticas4
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-22786 | Alta (7.3) | 1.1% | — | 12 ene 2026 | Gin-vue-admin is a backstage management system based on vue and gin. Gin-vue-admin <= v2.8.7 has a path traversal vulnerability in the breakpoint resume upload functionality. Attacker can upload any files on any… |
| CVE-2025-66410 | Alta (8.7) | 0.58% | — | 1 dic 2025 | Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control… |
| CVE-2022-47762 | Alta (7.5) | 0.93% | — | 3 feb 2023 | In gin-vue-admin < 2.5.5, the download module has a Path Traversal vulnerability. |
| CVE-2022-39345 | Alta (7.5) | 1.4% | — | 25 oct 2022 | Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Gin-vue-admin prior to 2.5.4 is vulnerable to path traversal, which leads to file upload… |
| CVE-2022-39305 | Crítica (9.8) | 1.2% | — | 24 oct 2022 | Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Versions prior to 2.5.4 contain a file upload ability. The affected code fails to validate… |
| CVE-2022-32176 | Crítica (9) | 1.0% | — | 17 oct 2022 | In "Gin-Vue-Admin", versions v2.5.1 through v2.5.3b are vulnerable to Unrestricted File Upload that leads to execution of javascript code, through the "Compress Upload" functionality to the Media Library. When an admin… |
| CVE-2022-32177 | Crítica (9) | 1.0% | — | 14 oct 2022 | In "Gin-Vue-Admin", versions v2.5.1 through v2.5.3beta are vulnerable to Unrestricted File Upload that leads to execution of javascript code, through the 'Normal Upload' functionality to the Media Library. When an admin… |
| CVE-2022-24843 | Alta (7.5) | 1.5% | — | 13 abr 2022 | Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Gin-vue-admin 2.50 has arbitrary file read vulnerability due to a lack of parameter validation.… |
| CVE-2022-24844 | Alta (8.8) | 1.5% | — | 13 abr 2022 | Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. The problem occurs in the following code in server/service/system/sys_auto_code_pgsql.go, which… |
| CVE-2022-21660 | Alta (8.1) | 1.1% | — | 9 feb 2022 | Gin-vue-admin is a backstage management system based on vue and gin. In versions prior to 2.4.7 low privilege users are able to modify higher privilege users. Authentication is missing on the `setUserInfo` function.… |
| CVE-2021-44219 | Crítica (9.8) | 1.3% | — | 24 nov 2021 | Gin-Vue-Admin before 2.4.6 mishandles a SQL database. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.