by Kastro
Paper/Archive/CVE-2022-32177

CVE-2022-32177

gin-vue-admin gin-vue-admin — Gin-vue-admin - Unrestricted File Upload

EPSS 1%public exploitCVSS 9.0
critical.is priorityof 100
51
CVSS 9.0 (NVD, ADP agree)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 70.5.705 × 2014.1Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

In "Gin-Vue-Admin", versions v2.5.1 through v2.5.3beta are vulnerable to Unrestricted File Upload that leads to execution of javascript code, through the 'Normal Upload' functionality to the Media Library. When an admin user views the uploaded file, a low privilege attacker will get access to the admin’s cookie leading to account takeover.

Affected

ProductAffectedFixed inSource
gin-vue-adminv2.5.1 – < unspecifiedunspecifiedCNA
gin-vue-adminunspecified – v2.5.3beta–CNA

Scores by source

CISA ADP9.0CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
NVD9.0CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

refmend.io/vulnerability-database/CVE-2022-32177refgithub.com/flipped-aurora/gin-vue-admin/blob/v2.5.3beta/web/src/components/upload/common.vue#L29-L37