Vulnerabilities > CVE-2022-30428 - Files or Directories Accessible to External Parties vulnerability in Ginadmin Project Ginadmin 1.0.1/20220510

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
ginadmin-project
CWE-552

Summary

In ginadmin through 05-10-2022, the incoming path value is not filtered, resulting in arbitrary file reading.