CVE-2022-32177: Gin-vue-admin - Unrestricted File Upload
In "Gin-Vue-Admin", versions v2.5.1 through v2.5.3beta are vulnerable to Unrestricted File Upload that leads to execution of javascript code, through the 'Normal Upload' functionality to the Media Library. When an admin user views the uploaded file, a low privilege attacker will get access to the admin’s cookie leading to account takeover.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2022-32177.
What is the severity level of CVE-2022-32177?
The severity level of CVE-2022-32177 is critical.
Which software versions are affected by CVE-2022-32177?
Gin-Vue-Admin versions v2.5.1 through v2.5.3beta are affected by CVE-2022-32177.
How does CVE-2022-32177 impact the system?
CVE-2022-32177 allows for Unrestricted File Upload, potentially leading to the execution of JavaScript code.
Is there a fix available for CVE-2022-32177?
At the moment, there is no known fix available for CVE-2022-32177. Please refer to the vendor's website or official advisories for any updates or patches.