GHSA-ffjp-66mx-3qpjHighCVSS 7.8

Privilege escalation in beego

Published
April 6, 2022
Last Modified
January 27, 2023

🔗 CVE IDs covered (1)

CVE-2021-27116 →

📋 Description

An issue was discovered in file profile.go. The MemProf and GetCPUProfile functions do not correctly check whether the created file exists. As a result attackers can launch attacks symlink attacks locally. Attackers can use this vulnerability to escalate privileges.

🎯 Affected products2

  • go/github.com/beego/beego/v2:>= 2.0.0, < 2.0.2
  • go/github.com/beego/beego:< 2.0.2

🔗 References (3)