HIGH7.5

GHSA-5824-6jfv-xr3r

Arbitrary file read in ginadmin

Details

In ginadmin through 05-10-2022, the incoming path value is not filtered, resulting in arbitrary file reading. A [patch](https://github.com/gphper/ginadmin/commit/726109f01ad23523715f36f7d272958064666a30) is available on the `master` branch of the repository.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/gphper/ginadmin

Introduced in: 0

No fixed version published yet for github.com/gphper/ginadmin (go modules). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2022-30428[ADVISORY]
https://github.com/gphper/ginadmin/issues/9[WEB]
https://github.com/gphper/ginadmin/commit/726109f01ad23523715f36f7d272958064666a30[WEB]
github.com/gphper/ginadmin[PACKAGE]