CVE-2022-21660
Missing authorization in gin-vue-admin
Résumé
Missing authorization in gin-vue-admin
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Gin-vue-admin is a backstage management system based on vue and gin. In versions prior to 2.4.7 low privilege users are able to modify higher privilege users. Authentication is missing on the setUserInfo function. Users are advised to update as soon as possible. There are no known workarounds.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov