CVE-2022-21660
Missing authorization in gin-vue-admin
概要
Missing authorization in gin-vue-admin
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Gin-vue-admin is a backstage management system based on vue and gin. In versions prior to 2.4.7 low privilege users are able to modify higher privilege users. Authentication is missing on the setUserInfo function. Users are advised to update as soon as possible. There are no known workarounds.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov