https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 03:21:16 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-114492 <p>gin-vue-admin through 2.9.2 contains a path traversal vulnerability that allows authenticated administrators to recursively delete arbitrary directories by supplying traversal sequences in the pluginName parameter. Attackers can send a crafted POST request to /autoCode/removePlugin with &#39;../&#39; sequences, causing os.RemoveAll to delete any directory writable by the server process.</p> <p>gin-vue-admin through 2.9.2 contains a path traversal vulnerability that allows authenticated administrators to recursively delete arbitrary directories by supplying traversal sequences in the pluginName parameter. Attackers can send a crafted POST request to /autoCode/removePlugin with &#39;../&#39; sequences, causing os.RemoveAll to delete any directory writable by the server process.</p> https://db.gcve.eu/vuln/fkie_cve-2026-114492 https://db.gcve.eu/vuln/ghsa-qgwp-mwx4-c64g <p>gin-vue-admin through 2.9.2 contains a path traversal vulnerability that allows authenticated administrators to recursively delete arbitrary directories by supplying traversal sequences in the pluginName parameter. Attackers can send a crafted POST request to /autoCode/removePlugin with &#39;../&#39; sequences, causing os.RemoveAll to delete any directory writable by the server process.</p> <p>gin-vue-admin through 2.9.2 contains a path traversal vulnerability that allows authenticated administrators to recursively delete arbitrary directories by supplying traversal sequences in the pluginName parameter. Attackers can send a crafted POST request to /autoCode/removePlugin with &#39;../&#39; sequences, causing os.RemoveAll to delete any directory writable by the server process.</p> https://db.gcve.eu/vuln/ghsa-qgwp-mwx4-c64g