CVE-2022-21660: Gin-Vue-Admin Project Gin-Vue-Admin

High severity, CVSS 8.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Gin-vue-admin is a backstage management system based on vue and gin. In versions prior to 2.4.7 low privilege users are able to modify higher privilege users. Authentication is missing on the `setUserInfo` function. Users are advised to update as soon as possible. There are no known workarounds.

Affected products

• Gin-Vue-Admin Project Gin-Vue-Admin: up to and including 2.4.6

Published 2022-02-09. Last modified 2026-06-17.