2 matches found
Directory Traversal
github.com/astaxie/beego is vulnerable to directory traversal. The library does not properly sanitize the sessionID field, allowing a malicious user to pass a string with the ./ characters through this field to traverse the directory and gain access to sensitive files...
Directory Traversal
github.com/astaxie/beego is vulnerable to directory traversal attacks. The library does not properly sanitize URL paths, allowing a malicious user to gain access to sensitive information...