GHSA-5824-6jfv-xr3r

Source

https://github.com/advisories/GHSA-5824-6jfv-xr3r

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-5824-6jfv-xr3r/GHSA-5824-6jfv-xr3r.json

Aliases

• CVE-2022-30428

Published

2022-05-26T00:01:22Z

Modified

2023-11-08T04:09:17.938347Z

Details

In ginadmin through 05-10-2022, the incoming path value is not filtered, resulting in arbitrary file reading. A patch is available on the master branch of the repository.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-30428
• https://github.com/gphper/ginadmin/issues/9
• https://github.com/gphper/ginadmin/commit/726109f01ad23523715f36f7d272958064666a30
• github.com/gphper/ginadmin