Vulnerability Description
An issue in sanluan flipped-aurora gin-vue-admin 2.4.x allows an attacker to escalate privileges via the Session Expiration component.
CVSS Score
4.7
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Related Weaknesses (CWE)
References
- https://gist.github.com/menghaining/8d424faebfe869c80eadaea12bbdd158
- https://github.com/flipped-aurora/gin-vue-admin/issues/1324
- https://github.com/menghaining/PoC/blob/main/gin-vue-admin/gin-vue-admin--PoC.md
- https://gist.github.com/menghaining/8d424faebfe869c80eadaea12bbdd158
- https://github.com/flipped-aurora/gin-vue-admin/issues/1324
- https://github.com/menghaining/PoC/blob/main/gin-vue-admin/gin-vue-admin--PoC.md
FAQ
What is CVE-2024-31760?
CVE-2024-31760 is a vulnerability with a CVSS score of 4.7 (MEDIUM). An issue in sanluan flipped-aurora gin-vue-admin 2.4.x allows an attacker to escalate privileges via the Session Expiration component.
How severe is CVE-2024-31760?
CVE-2024-31760 has been rated MEDIUM with a CVSS base score of 4.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-31760?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.