Symlink Attack

github.com/beego/beego is vulnerable to symlink attack. Lack of sufficient check for the existence of files created allows an attacker to use MemProf command to trigger the symbolic link attack locally...

Symlink Attack

github.com/beego/beego is vulnerable to symlink attack. Lack of sufficient check for the existence of files created allows an attacker to use MemProf and GetCPUProfile commands to trigger the symbolic link attack locally...

CVE-2021-27116

An issue was discovered in file profile.go in function MemProf in beego through 2.0.2, allows attackers to launch symlink attacks locally...

CVE-2021-27116

An issue was discovered in file profile.go in function MemProf in beego through 2.0.2, allows attackers to launch symlink attacks locally...

CVE-2021-27116

An issue was discovered in file profile.go in function MemProf in beego through 2.0.2, allows attackers to launch symlink attacks locally...

CVE-2021-27116: Improper Link Resolution Before File Access

An issue was discovered in file profile.go in function MemProf in beego through 2.0.2, allows attackers to launch symlink attacks locally...

PT-2022-9806

Name of the Vulnerable Software and Affected Versions beego versions through 2.0.2 Description An issue was discovered in the file profile.go, specifically in the MemProf function, which allows attackers to launch symlink attacks locally. This is due to the MemProf and GetCPUProfile functions not...

Beego 后置链接漏洞

Beego is an open source web framework based on the Go language. A security vulnerability in the file profile.go for the function MemProf in Beego 2.0.2 allows attackers to locally launch a symbolic link attack...