PT-2022-21139 · Unknown · Gin-Vue-Admin

Published 2022-10-17 · Updated 2022-10-26 · CVE-2022-32176

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Gin-Vue-Admin versions v2.5.1 through v2.5.3b

Description The issue allows for Unrestricted File Upload, leading to the execution of javascript code through the "Compress Upload" functionality to the Media Library. When an admin user views the uploaded file, a low privilege attacker can gain access to the admin's cookie, resulting in account takeover.

Recommendations For versions v2.5.1 through v2.5.3b, consider disabling the "Compress Upload" functionality to the Media Library as a temporary workaround until a patch is available. Restrict access to the Media Library to minimize the risk of exploitation. Avoid allowing low privilege users to upload files to the Media Library until the issue is resolved.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2022-32176

Affected Products

Gin-Vue-Admin

References · 5

• 🔥 https://github.com/flipped-aurora/gin-vue-admin/blob/v2.5.3beta/web/src/components/upload/image.vue#L43-L49 · Exploit
• 🔥 https://mend.io/vulnerability-database/CVE-2022-32176 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-32176 · Security Note
• https://osv.dev/vulnerability/CVE-2022-32176 · Vendor Advisory
• https://t.me/cibsecurity/51624 · Telegram Post