~ / search / GHSA-9pg5-3pjc-f8wm

GHSA-9pg5-3pjc-f8wm

Path traversal in ginadmin

Source: GitHub Advisory Database (reviewed) High CVE-2022-30427

Packages

EcosystemPackageAffectedFixed in
Go github.com/gphper/ginadmin <= 0.1.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

In ginadmin through 05-10-2022 the incoming path value is not filtered, resulting in directory traversal. A [patch](https://github.com/gphper/ginadmin/commit/726109f01ad23523715f36f7d272958064666a30) is available on the `master` branch of the repository.

References

External links from the advisory. They lead to third-party sites.