HIGH7.5

GHSA-9pg5-3pjc-f8wm

Path traversal in ginadmin

Details

In ginadmin through 05-10-2022 the incoming path value is not filtered, resulting in directory traversal. A [patch](https://github.com/gphper/ginadmin/commit/726109f01ad23523715f36f7d272958064666a30) is available on the `master` branch of the repository.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/gphper/ginadmin

Introduced in: 0

No fixed version published yet for github.com/gphper/ginadmin (go modules). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2022-30427[ADVISORY]
https://github.com/gphper/ginadmin/issues/8[WEB]
https://github.com/gphper/ginadmin/commit/726109f01ad23523715f36f7d272958064666a30[WEB]
github.com/gphper/ginadmin[PACKAGE]