180 matches found
GHSA-R6QH-J42J-PW64 Beego privilege escalation vulnerability
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in the beego/core/logs/smtp.go file...
Security Bulletin: Vulnerability in beego affects Cloud Pak System [CVE-2022-31836]
Summary Vulnerability in beego affects Cloud Pak System. IBM Cloud Pak System addrressed vulnerability. Vulnerability Details CVEID:CVE-2022-31836 DESCRIPTION: Beego could allow a remote attacker to traverse directories on the system, caused by a flaw in the leafInfo.match function. An attacker...
CVE-2024-40465
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the getCacheFileName function in file.go file...
CVE-2024-40464
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go file...
PT-2024-28858 · Beego · Beego
Name of the Vulnerable Software and Affected Versions: beego versions 2.2.0 and earlier Description: The issue allows a remote attacker to escalate privileges via the getCacheFileName function in the file.go file. Recommendations: For beego versions 2.2.0 and earlier, at the moment, there is no...
CVE-2024-40464
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go file...
CVE-2024-40465
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the getCacheFileName function in file.go file...
PT-2024-28857 · Beego · Beego
Name of the Vulnerable Software and Affected Versions: beego versions 2.2.0 and earlier Description: An issue in beego allows a remote attacker to escalate privileges via the sendMail function located in the beego/core/logs/smtp.go file. Recommendations: For beego versions 2.2.0 and earlier,...
CVE-2024-40464
CVE-2024-40464 affects beego v2.2.0 and earlier. A remote attacker can escalate privileges via the sendMail function in beego/core/logs/smtp.go due to improper validation in OpenSSL certificate handling. Public sources describe privilege escalation through this path, with IBM/X-Force listing a hi...
Beego 安全漏洞
Beego is an open source web framework based on the Go language from Beego Open Source. A security vulnerability exists in Beego before version v.2.2.0. A remote attacker could elevate privileges through the getCacheFileName function in the file.go file...
CVE-2024-40465
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the getCacheFileName function in file.go file...
CVE-2024-40465
CVE-2024-40465 is a privilege-escalation vulnerability in Beego (getCacheFileName in file.go) where a remote authenticated attacker could gain elevated privileges. The IBM Security bulletin specifies a base score of 8.8 (CVSS v3.1, HIGH) with network attack vector, low attack complexity, and requ...
CVE-2024-40464
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go file...
CVE-2024-40464
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go file...
CVE-2024-40465
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the getCacheFileName function in file.go file...
Security Bulletin: IBM Storage Fusion is vulnerable to directory traversal due to beego.
Summary Beego is used by IBM Storage Fusion as part of the User Interface. See Vulnerability Details below. CVE-2022-31836, CVE-2022-31259. Vulnerability Details CVEID:CVE-2022-31836 DESCRIPTION: Beego could allow a remote attacker to traverse directories on the system, caused by a flaw in the...
Security Bulletin: IBM Storage Fusion HCI is vulnerable to directory traversal due to Beego.
Summary Beego is used by IBM Storage Fusion HCI as part of the user interface. See Vulnerability Details below. CVE-2022-31836, CVE-2022-31259. Vulnerability Details CVEID:CVE-2022-31836 DESCRIPTION: Beego could allow a remote attacker to traverse directories on the system, caused by a flaw in th...
Security Bulletin: IBM Storage Fusion and IBM Storage Fusion HCI may be vulnerable to denial of service and link following via Go-Yaml, kube-apiserver, Golang Go and Beego
Summary IBM Storage Fusion and IBM Storage Fusion HCI, previously known as Spectrum Fusion and Spectrum Fusion HCI, may be affected by vulnerabilities in Go-Yaml, kube-apiserver, Golang Go and Beego . Vulnerabilities include denial of service, gaining of elevated privileges, improper link followi...
go-bbs 代码问题漏洞
go-bbs is a switchable template BBS social blogging system based on Beego development. A security vulnerability exists in go-bbs v1, which was discovered via component/api/v1/download and contains an arbitrary file download vulnerability...
