Critical severity · published Oct 17, 2022
CVE-2022-32176
Gin-vue-admin - Unrestricted File Upload
9.0
CVSS
1.3%
EPSS
No
On KEV
Description
In "Gin-Vue-Admin", versions v2.5.1 through v2.5.3b are vulnerable to Unrestricted File Upload that leads to execution of javascript code, through the "Compress Upload" functionality to the Media Library. When an admin user views the uploaded file, a low privilege attacker will get access to the admin's cookie leading to account takeover.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GI
gin-vue-admin · gin-vue-admin
v2.5.1 before unspecified; through v2.5.3b · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-32176
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-32176
Exploit
https://github.com/flipped-aurora/gin-vue-admin/blob/v2.5.3beta/web/src/components/upload/image.vue#L43-L49
Exploit
https://www.mend.io/vulnerability-database/CVE-2022-32176
More from gin-vue-admin
9.0
CVE-2022-32177
Gin-vue-admin - Unrestricted File Upload