What is GHSA-2v6v-q994-xvxx?

GHSA-2v6v-q994-xvxx is a security advisory published by GitHub Security Advisories with High severity. Privilege escalation in beego

Which CVE IDs does GHSA-2v6v-q994-xvxx cover?

GHSA-2v6v-q994-xvxx covers the following CVE IDs: CVE-2021-27117. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2v6v-q994-xvxx?

GHSA-2v6v-q994-xvxx has a CVSS v3 base score of 7.8, published by GitHub Security Advisories.

Which products are affected by GHSA-2v6v-q994-xvxx?

GHSA-2v6v-q994-xvxx affects 2 products, including: go/github.com/beego/beego/v2:\u003e= 2.0.0, \u003c 2.0.2; go/github.com/beego/beego:\u003c 2.0.2.

GHSA-2v6v-q994-xvxxHighCVSS 7.8

Privilege escalation in beego

Vendor

GitHub Security Advisories

Published

April 6, 2022

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2021-27117 →

📋 Description

beego is an open-source, high-performance web framework for the Go programming language. An issue was discovered in file profile.go in function GetCPUProfile in beego through 2.0.2, allows attackers to launch symlink attacks locally.

🎯 Affected products2

go/github.com/beego/beego/v2:>= 2.0.0, < 2.0.2
go/github.com/beego/beego:< 2.0.2

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2021-27117
https://github.com/beego/beego/issues/4484
https://github.com/advisories/GHSA-2v6v-q994-xvxx