What is GHSA-28r6-jm5h-mrgg?

GHSA-28r6-jm5h-mrgg is a security advisory published by GitHub Security Advisories with High severity. Access control bypass in Beego

Which CVE IDs does GHSA-28r6-jm5h-mrgg cover?

GHSA-28r6-jm5h-mrgg covers the following CVE IDs: CVE-2021-30080. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-28r6-jm5h-mrgg?

GHSA-28r6-jm5h-mrgg affects 2 products, including: go/github.com/beego/beego/v2:\u003e= 2.0.0, \u003c 2.0.3; go/github.com/beego/beego:\u003c= 1.12.11.

GHSA-28r6-jm5h-mrggHigh

Access control bypass in Beego

Vendor

GitHub Security Advisories

Published

April 6, 2022

Last Modified

February 14, 2023

🔗 CVE IDs covered (1)

CVE-2021-30080 →

📋 Description

An issue was discovered in the route lookup process in beego through 2.0.1, allows attackers to bypass access control.

🎯 Affected products2

go/github.com/beego/beego/v2:>= 2.0.0, < 2.0.3
go/github.com/beego/beego:<= 1.12.11

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2021-30080
https://github.com/beego/beego/commit/d5df5e470d0a8ed291930ae802fd7e6b95226519
https://github.com/beego/beego/pull/4459
https://pkg.go.dev/vuln/GO-2022-0572
https://github.com/advisories/GHSA-28r6-jm5h-mrgg