Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36268
HistoryJul 06, 2022 - 7:23 a.m.

Directory Traversal

2022-07-0607:23:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13

0.001 Low

EPSS

Percentile

50.7%

github.com/beego/beego is vulnerable to directory traversal vulnerability. The vulnerability exists due to the insecure use of path.join to deal with wildcardValues in leafInfo.match function, allowing an attacker to exploit directories outside of the intended scope.

0.001 Low

EPSS

Percentile

50.7%