214 matches found
CVE-2024-40465: Use of a Broken or Risky Cryptographic Algorithm
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the getCacheFileName function in file.go file...
CVE-2024-40465
CVE-2024-40465 is a privilege-escalation vulnerability in Beego (getCacheFileName in file.go) where a remote authenticated attacker could gain elevated privileges. The IBM Security bulletin specifies a base score of 8.8 (CVSS v3.1, HIGH) with network attack vector, low attack complexity, and requ...
CVE-2024-40465
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the getCacheFileName function in file.go file...
CVE-2024-40465
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the getCacheFileName function in file.go file...
Security Bulletin: IBM Storage Fusion is vulnerable to directory traversal due to beego.
Summary Beego is used by IBM Storage Fusion as part of the User Interface. See Vulnerability Details below. CVE-2022-31836, CVE-2022-31259. Vulnerability Details CVEID:CVE-2022-31836 DESCRIPTION: Beego could allow a remote attacker to traverse directories on the system, caused by a flaw in the...
Security Bulletin: IBM Storage Fusion HCI is vulnerable to directory traversal due to Beego.
Summary Beego is used by IBM Storage Fusion HCI as part of the user interface. See Vulnerability Details below. CVE-2022-31836, CVE-2022-31259. Vulnerability Details CVEID:CVE-2022-31836 DESCRIPTION: Beego could allow a remote attacker to traverse directories on the system, caused by a flaw in th...
Security Bulletin: IBM Storage Fusion and IBM Storage Fusion HCI may be vulnerable to denial of service and link following via Go-Yaml, kube-apiserver, Golang Go and Beego
Summary IBM Storage Fusion and IBM Storage Fusion HCI, previously known as Spectrum Fusion and Spectrum Fusion HCI, may be affected by vulnerabilities in Go-Yaml, kube-apiserver, Golang Go and Beego . Vulnerabilities include denial of service, gaining of elevated privileges, improper link followi...
go-bbs 代码问题漏洞
go-bbs is a switchable template BBS social blogging system based on Beego development. A security vulnerability exists in go-bbs v1, which was discovered via component/api/v1/download and contains an arbitrary file download vulnerability...
GitHub Security Lab: [Go]: Add Beego.Input.RequestBody source to Beego framework
Vulnerability description not provided...
GO-2022-0569 Path traversal in github.com/beego/beego and beego/v2
The leafInfo.match function uses path.join to deal with wildcard values which can lead to cross directory risk...
GO-2022-0572 Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2
An issue was discovered in the route lookup process in beego which attackers to bypass access control...
Directory Traversal
github.com/beego/beego is vulnerable to directory traversal vulnerability. The vulnerability exists due to the insecure use of path.join to deal with wildcardValues in leafInfo.match function, allowing an attacker to exploit directories outside of the intended scope...
Path Traversal in Beego
The leafInfo.match function in Beego v2.0.3 and below uses path.join to deal with wildcardvalues which can lead to cross directory risk...
GHSA-95F9-94VC-665H Path Traversal in Beego
The leafInfo.match function in Beego v2.0.3 and below uses path.join to deal with wildcardvalues which can lead to cross directory risk...
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The leafInfo.match function in Beego v2.0.3 and below uses path.join to deal with wildcardvalues which can lead to cross directory risk...
CVE-2022-31836
The leafInfo.match function in Beego v2.0.3 and below uses path.join to deal with wildcardvalues which can lead to cross directory risk...
CVE-2022-31836
The leafInfo.match function in Beego v2.0.3 and below uses path.join to deal with wildcardvalues which can lead to cross directory risk...
Cross site scripting
The leafInfo.match function in Beego v2.0.3 and below uses path.join to deal with wildcardvalues which can lead to cross directory risk...
CVE-2022-31836: Improper Limitation of a Pathname to a Restricted Directory
The leafInfo.match function in Beego v2.0.3 and below uses path.join to deal with wildcardvalues which can lead to cross directory risk...
