Veille CVE

Recherche « flipped-aurora gin-vue-admin »

1 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « flipped-aurora gin-vue-admin » ✕
  1. CVE-2026-114492 6.5 Moyenne

    flipped-aurora gin-vue-admin

    gin-vue-admin through 2.9.2 contains a path traversal vulnerability that allows authenticated administrators to recursively delete arbitrary directories by supplying traversal sequences in the pluginName parameter. Attackers can send a crafted POST request to /autoCode/removePlugin with '../' sequences, causing os.RemoveAll to delete any directory writable by the server process.