https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 19:35:23 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-4961 EUVD-2026-4961 https://cve.radiocsirt.org/vuln/euvd-2026-4961 https://cve.radiocsirt.org/vuln/fkie_cve-2024-31457 <p>gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. gin-vue-admin pseudoversion 0.0.0-20240407133540-7bc7c3051067, corresponding to version 2.6.1, has a code injection vulnerability in the backend. In the Plugin System -&gt; Plugin Template feature, an attacker can perform directory traversal by manipulating the `plugName` parameter. They can create specific folders such as `api`, `config`, `global`, `model`, `router`, `service`, and `main.go` function within the specified traversal directory. Moreover, the Go files within these folders can have arbitrary code inserted based on a specific PoC parameter. The main reason for the existence of this vulnerability is the controllability of the PlugName field within the struct. Pseudoversion 0.0.0-20240409100909-b1b7427c6ea6, corresponding to commit b1b7427c6ea6c7a027fa188c6be557f3795e732b, contains a patch for the issue. As a workaround, one may manually use a filtering method available in the GitHub Security Advisory to rectify the directory traversal problem.</p> <p>gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. gin-vue-admin pseudoversion 0.0.0-20240407133540-7bc7c3051067, corresponding to version 2.6.1, has a code injection vulnerability in the backend. In the Plugin System -&gt; Plugin Template feature, an attacker can perform directory traversal by manipulating the `plugName` parameter. They can create specific folders such as `api`, `config`, `global`, `model`, `router`, `service`, and `main.go` function within the specified traversal directory. Moreover, the Go files within these folders can have arbitrary code inserted based on a specific PoC parameter. The main reason for the existence of this vulnerability is the controllability of the PlugName field within the struct. Pseudoversion 0.0.0-20240409100909-b1b7427c6ea6, corresponding to commit b1b7427c6ea6c7a027fa188c6be557f3795e732b, contains a patch for the issue. As a workaround, one may manually use a filtering method available in the GitHub Security Advisory to rectify the directory traversal problem.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-31457 https://cve.radiocsirt.org/vuln/ghsa-gv3w-m57p-3wc4 <p><strong>Affected:</strong> Go: github.com/flipped-aurora/gin-vue-admin/server</p> <p>### Impact &#34;gin-vue-admin&lt;=v2.6.1 has a code injection vulnerability in the backend. In the Plugin System -&gt; Plugin Template feature, an attacker can perform directory traversal by manipulating the &#39;plugName&#39; parameter. They can create specific folders such as &#39;api&#39;, &#39;config&#39;, &#39;global&#39;, &#39;model&#39;, &#39;router&#39;, &#39;service&#39;, and &#39;main.go&#39; function within the specified traversal directory. Moreover, the Go files within these folders can have arbitrary code inserted based on a specific PoC parameter.&#34;</p> <p>Affected code: https://github.com/flipped-aurora/gin-vue-admin/blob/746af378990ebf3367f8bb3d4e9684936df152e7/server/api/v1/system/sys_auto_code.go:239. Let&#39;s take a look at the method &#39;AutoPlug&#39; within the &#39;AutoCodeApi&#39; struct. ```go func (autoApi *AutoCodeApi) AutoPlug(c *gin.Context) { var a system.AutoPlugReq err := c.ShouldBindJSON(&amp;a) if err != nil { response.FailWithMessage(err.Error(), c) return } a.Snake = strings.ToLower(a.PlugName) a.NeedModel = a.HasRequest || a.HasResponse err = autoCodeService.CreatePlug(a) if err != nil { global.GVA_LOG.Error(&#34;预览失败!&#34;, zap.Error(err)) response.FailWithMessage(&#34;预览失败&#34;, c) return } response.Ok(c) } ``` The main reason for the existence of this vulnerability is the controllability of the PlugName field within the struct. ```go type AutoPlugReq struct { PlugName string `json:&#34;plugName&#34;` // 必然大写开头 Snake string `json:&#34;snake&#34;` // 后端自动转为 snake RouterGroup string `json:&#34;routerGroup&#34;` HasGloba…</p> <p><strong>Affected:</strong> Go: github.com/flipped-aurora/gin-vue-admin/server</p> <p>### Impact &#34;gin-vue-admin&lt;=v2.6.1 has a code injection vulnerability in the backend. In the Plugin System -&gt; Plugin Template feature, an attacker can perform directory traversal by manipulating the &#39;plugName&#39; parameter. They can create specific folders such as &#39;api&#39;, &#39;config&#39;, &#39;global&#39;, &#39;model&#39;, &#39;router&#39;, &#39;service&#39;, and &#39;main.go&#39; function within the specified traversal directory. Moreover, the Go files within these folders can have arbitrary code inserted based on a specific PoC parameter.&#34;</p> <p>Affected code: https://github.com/flipped-aurora/gin-vue-admin/blob/746af378990ebf3367f8bb3d4e9684936df152e7/server/api/v1/system/sys_auto_code.go:239. Let&#39;s take a look at the method &#39;AutoPlug&#39; within the &#39;AutoCodeApi&#39; struct. ```go func (autoApi *AutoCodeApi) AutoPlug(c *gin.Context) { var a system.AutoPlugReq err := c.ShouldBindJSON(&amp;a) if err != nil { response.FailWithMessage(err.Error(), c) return } a.Snake = strings.ToLower(a.PlugName) a.NeedModel = a.HasRequest || a.HasResponse err = autoCodeService.CreatePlug(a) if err != nil { global.GVA_LOG.Error(&#34;预览失败!&#34;, zap.Error(err)) response.FailWithMessage(&#34;预览失败&#34;, c) return } response.Ok(c) } ``` The main reason for the existence of this vulnerability is the controllability of the PlugName field within the struct. ```go type AutoPlugReq struct { PlugName string `json:&#34;plugName&#34;` // 必然大写开头 Snake string `json:&#34;snake&#34;` // 后端自动转为 snake RouterGroup string `json:&#34;routerGroup&#34;` HasGloba…</p> https://cve.radiocsirt.org/vuln/ghsa-gv3w-m57p-3wc4 https://cve.radiocsirt.org/vuln/gsd-2024-31457 gsd-2024-31457 https://cve.radiocsirt.org/vuln/gsd-2024-31457