CVE-2022-24843: Gin-Vue-Admin Project Gin-Vue-Admin

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Gin-vue-admin 2.50 has arbitrary file read vulnerability due to a lack of parameter validation. This has been resolved in version 2.5.1. There are no known workarounds for this issue.

Affected products

• Gin-Vue-Admin Project Gin-Vue-Admin: before 2.5.1 (fixed in 2.5.1)

Published 2022-04-13. Last modified 2026-06-17.