9.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
50.7%
The leafInfo.match() function in Beego v2.0.3 and below uses path.join() to deal with wildcardvalues which can lead to cross directory risk.
github.com/advisories/GHSA-95f9-94vc-665h
github.com/beego/beego/issues/4961