CVE-2019-16355

The File Session Manager in Beego 1.10.0 allows local users to read session files because of weak permissions for individual files...

CVE-2019-16355

The CVE-2019-16355 entry concerns Beego’s File Session Manager in Beego 1.10.0, where local attackers can read session files due to weak per-file permissions. Multiple connected sources (Red Hat, OSV entries) reiterate that Beego’s File Session Manager permits information disclosure via improper ...

CVE-2019-16355

The File Session Manager in Beego 1.10.0 allows local users to read session files because of weak permissions for individual files...

CVE-2019-16354

The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation within a directory with weak permissions...

CVE-2019-16354

CVE-2019-16354 affects Beego’s File Session Manager. A race condition in file creation within a directory with weak permissions allows a local attacker to read session files. Publicly documented impact centers on Beego 1.10.0; multiple advisories indicate the issue persists across older Beego rel...

Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)

The File Session Manager in Beego allows local users to read session files because there is a race condition involving file creation within a directory with weak permissions...

CVE-2019-16354: Concurrent Execution using Shared Resource with Improper Synchronization

The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation within a directory with weak permissions...

PT-2019-14644

Name of the Vulnerable Software and Affected Versions Beego versions 1.10.0 through 1.12.1 Beego versions prior to 1.12.2 Description The issue concerns a race condition and weak permissions in the File Session Manager, allowing local users with filesystem access to read arbitrary session data...

PT-2019-14645

Name of the Vulnerable Software and Affected Versions Beego versions 1.10.0 through 1.12.1 Description The issue concerns weak permissions for session files, allowing local users to read session data. This is due to the File Session Manager in Beego storing session data with permissive permission...

CVE-2019-16355: Incorrect Default Permissions

The File Session Manager in Beego 1.10.0 allows local users to read session files because of weak permissions for individual files...

Incorrect Default Permissions

The File Session Manager in Beego allows local users to read session files because of weak permissions for individual files...

Directory Traversal

github.com/astaxie/beego is vulnerable to directory traversal. The library does not properly sanitize the sessionID field, allowing a malicious user to pass a string with the ./ characters through this field to traverse the directory and gain access to sensitive files...

Directory Traversal

github.com/astaxie/beego is vulnerable to directory traversal attacks. The library does not properly sanitize URL paths, allowing a malicious user to gain access to sensitive information...

Cross-site Scripting (XSS)

github.com/astaxie/beego is vulnerable to cross-site scripting XSS. The vulnerability exists due to the lack of sanitization on resultLists in qpsIndex...