Symlink Attack

github.com/beego/beego is vulnerable to symlink attack. Lack of sufficient check for the existence of files created allows an attacker to use MemProf command to trigger the symbolic link attack locally...

Symlink Attack

github.com/beego/beego is vulnerable to symlink attack. Lack of sufficient check for the existence of files created allows an attacker to use MemProf and GetCPUProfile commands to trigger the symbolic link attack locally...

CVE-2021-27116

An issue was discovered in file profile.go in function MemProf in beego through 2.0.2, allows attackers to launch symlink attacks locally...

Beego 后置链接漏洞

Beego is an open source web framework based on the Go language. A security vulnerability in the file profile.go for the function MemProf in Beego 2.0.2 allows attackers to locally launch a symbolic link attack...