What is CVE-2022-24844?

CVE-2022-24844 is a high-severity vulnerability in Flipped-aurora Gin-vue-admin, classified under SQL Injection. CVSS score: 8.1/10. Published 2022-04-13.

How severe is CVE-2022-24844?

High severity. CVSS v3 base score is 8.1 out of 10.

SQL Injection in Flipped-aurora Gin-vue-admin

CVE-2022-24844

Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. The problem occurs in the following code in server/service/system/sys_auto_code_pgsql.go, which means that PostgreSQ…

Vulnerability class: SQL Injection

EPSS: 0.014 (68.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Flipped-aurora Gin-vue-admin — versions < 2.5.1
Gin-vue-admin_project Gin-vue-admin
Postgresql

Weakness classification (CWE)

CWE-89 — SQL Injection

References

security-advisories@github.com (x_refsource_CONFIRM, Exploit, Patch, Third Party Advisory)
security-advisories@github.com (Patch, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2022-24844?: CVE-2022-24844 is a high-severity vulnerability in Flipped-aurora Gin-vue-admin, classified under SQL Injection. CVSS score: 8.1/10. Published 2022-04-13.
How severe is CVE-2022-24844?: High severity. CVSS v3 base score is 8.1 out of 10.