Lucene search
Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-854403D4E8F2A19F3337DCD022CDE766HistoryMay 22, 2022 - 12:00 a.m.
Access control bypass in beego
2022-05-2200:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
10
0.002 Low
EPSS
Percentile
53.7%
The route lookup process in beego through 1.12.4 and 2.x through 2.0.2 allows attackers to bypass access control. When a /p1/p2/:name route is configured, attackers can access it by appending .xml in various places (e.g., p1.xml instead of p1).
| CPE | Name | Operator | Version |
|---|---|---|---|
| go/github.com/beego/beego | lt | v1.12.4 |
Related
gitlab
gitlab
Authentication Bypass Using an Alternate Path or Channel
2022-05-21 00:00:00
Access control bypass in beego
2022-05-22 00:00:00
osv
osv
CVE-2022-31259
2022-05-21 19:15:52
Access control bypass in beego
2022-05-22 00:00:32
cvelist
cvelist
CVE-2022-31259
2022-05-21 00:00:00
veracode
veracode
Authentication Bypass
2022-05-23 03:51:51
github
github
Access control bypass in beego
2022-05-22 00:00:32
nvd
nvd
CVE-2022-31259
2022-05-21 19:15:52
cve
cve
CVE-2022-31259
2022-05-21 19:15:52
prion
prion
Improper access control
2022-05-21 19:15:00
