Lucene search
GoogleOSV:CVE-2022-31259HistoryMay 21, 2022 - 7:15 p.m.
CVE-2022-31259
2022-05-2119:15:52
Google
osv.dev
1
The route lookup process in beego before 1.12.9 and 2.x before 2.0.3 allows attackers to bypass access control. When a /p1/p2/:name route is configured, attackers can access it by appending .xml in various places (e.g., p1.xml instead of p1).
Related
gitlab
gitlab
Authentication Bypass Using an Alternate Path or Channel
2022-05-21 00:00:00
Access control bypass in beego
2022-05-22 00:00:00
Access control bypass in beego
2022-05-22 00:00:00
cvelist
cvelist
CVE-2022-31259
2022-05-21 00:00:00
osv
osv
Access control bypass in beego
2022-05-22 00:00:32
veracode
veracode
Authentication Bypass
2022-05-23 03:51:51
github
github
Access control bypass in beego
2022-05-22 00:00:32
cve
cve
CVE-2022-31259
2022-05-21 19:15:52
prion
prion
Improper access control
2022-05-21 19:15:00
nvd
nvd
CVE-2022-31259
2022-05-21 19:15:52
