Path Traversal in gin-vue-admin

HIGH 7.5CVE-2022-47762 · GHSA-x623-hr8h-7g5v · GO-2023-1560 · Published 03/02/2023 · updated 23/10/2026

In short

CVE-2022-47762 is a HIGH (CVSS 7.5) vulnerability affecting github.com/flipped-aurora/gin-vue-admin, gin-vue-admin (gin-vue-admin project).
Chance of exploitation in the next 30 days (EPSS): 0.93%, higher than 60.6% of all vulnerabilities.
Fix: update to 2.5.5, 2.5.5+incompatible or later.

Package	Affected versions	Patched versions
github.com/flipped-aurora/gin-vue-admin Go	`< 2.5.5< 2.5.5+incompatible`	`2.5.52.5.5+incompatible`
gin-vue-admin gin-vue-admin_project	`< 2.5.5`	`2.5.5`

In gin-vue-admin < 2.5.5, the download module has a Path Traversal vulnerability.

NVD description

In gin-vue-admin < 2.5.5, the download module has a Path Traversal vulnerability.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 2.5.5< 2.5.5+incompatible

2.5.52.5.5+incompatible

< 2.5.5

2.5.5

More vulnerabilities in github.com/flipped-aurora/gin-vue-admin

See all →