What is the severity of CVE-2022-24844?

The severity of CVE-2022-24844 is high with a CVSS score of 8.8.

How does CVE-2022-24844 affect Gin-vue-admin?

CVE-2022-24844 affects Gin-vue-admin versions up to and including 2.5.1.

What is the vulnerability type of CVE-2022-24844?

CVE-2022-24844 is classified as a CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.

How can I fix CVE-2022-24844?

To fix CVE-2022-24844, it is recommended to update Gin-vue-admin to a version that includes the fix for this vulnerability.

Where can I find more information about CVE-2022-24844?

More information about CVE-2022-24844 can be found in the official GitHub repository of Gin-vue-admin, including the specific PR and security advisory related to this vulnerability.

Vulnerability/
CVE-2022-24844

high

8.8

CWE

13/4/2022

3/8/2024

CVE-2022-24844: SQL Injection in github.com/flipped-aurora/gin-vue-admin

First published: Wed Apr 13 2022(Updated: )

Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. The problem occurs in the following code in server/service/system/sys_auto_code_pgsql.go, which means that PostgreSQL must be used as the database for this vulnerability to occur. Users must: Require JWT login? and be using PostgreSQL to be affected. This issue has been resolved in version 2.5.1. There are no known workarounds.

Credit: security-advisories@github.com

Affected Software	Affected Version	How to fix
All of
Gin-vue-admin Project Gin-vue-admin	<2.5.1
PostgreSQL PostgreSQL

Remedy

https://github.com/flipped-aurora/gin-vue-admin/pull/1024

Remedy

https://github.com/flipped-aurora/gin-vue-admin/security/advisories/GHSA-5g92-6hpp-w425

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2022-24844?
The severity of CVE-2022-24844 is high with a CVSS score of 8.8.
How does CVE-2022-24844 affect Gin-vue-admin?
CVE-2022-24844 affects Gin-vue-admin versions up to and including 2.5.1.
What is the vulnerability type of CVE-2022-24844?
CVE-2022-24844 is classified as a CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.
How can I fix CVE-2022-24844?
To fix CVE-2022-24844, it is recommended to update Gin-vue-admin to a version that includes the fix for this vulnerability.
Where can I find more information about CVE-2022-24844?
More information about CVE-2022-24844 can be found in the official GitHub repository of Gin-vue-admin, including the specific PR and security advisory related to this vulnerability.

agent/references
agent/type
agent/remedy
collector/nvd-index
agent/software-canonical-lookup-request
agent/weakness
agent/author
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/title
agent/last-modified-date
agent/severity
agent/description
agent/first-publish-date
agent/event
agent/tags
vendor/gin-vue-admin project
canonical/gin-vue-admin project gin-vue-admin
vendor/postgresql
canonical/postgresql postgresql

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.