Lucene search
Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-CC6EB80E6A5BF8FFB9F97620A9C163EAHistoryMay 21, 2022 - 12:00 a.m.
Authentication Bypass Using an Alternate Path or Channel
2022-05-2100:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
7
0.002 Low
EPSS
Percentile
53.7%
The route lookup process in beego through 1.12.4 and 2.x through 2.0.2 allows attackers to bypass access control. When a /p1/p2/:name route is configured, attackers can access it by appending .xml in various places (e.g., p1.xml instead of p1).
Related
osv
osv
CVE-2022-31259
2022-05-21 19:15:52
Access control bypass in beego
2022-05-22 00:00:32
cvelist
cvelist
CVE-2022-31259
2022-05-21 00:00:00
nvd
nvd
CVE-2022-31259
2022-05-21 19:15:52
gitlab
gitlab
Access control bypass in beego
2022-05-22 00:00:00
Access control bypass in beego
2022-05-22 00:00:00
veracode
veracode
Authentication Bypass
2022-05-23 03:51:51
github
github
Access control bypass in beego
2022-05-22 00:00:32
cve
cve
CVE-2022-31259
2022-05-21 19:15:52
prion
prion
Improper access control
2022-05-21 19:15:00
