github.com/astaxie/beego
View on Github
Activity
- Latest release
- 5y ago
- Total releases
- 20
- Cadence
- ~3 months
- Last 12 months
- 0
Reach
- Stars
- —
Details
- First release
- Jun 16, 2015
| Version | Released | |
|---|---|---|
v1.12.3
patch
3 CVEs
CVE-2022-31836
GO-2022-0569
GHSA-95f9-94vc-665h
Aug 23, 2022
Path traversal in github.com/beego/beego and beego/v2 The leafInfo.match() function uses path.join() to deal with wildcard values which can lead to cross directory risk. References Updated May 20, 2024 · Source: OSV.dev
CVE-2021-30080
GO-2022-0572
GHSA-28r6-jm5h-mrgg
Aug 22, 2022
Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2 An issue was discovered in the route lookup process in beego which attackers to bypass access control. References Updated May 20, 2024 · Source: OSV.dev
CVE-2022-31259
GO-2022-0463
GHSA-qx32-f6g6-fcfr
Jul 01, 2022
Access control bypass due to broad route matching in github.com/beego/beego and beego/v2 Routes in the beego HTTP router can match unintended patterns. This overly-broad matching may permit an attacker to bypass access controls. For example, the pattern "/a/b/:name" can match the URL "/a.xml/b/". This may bypass access control applied to the prefix "/a/". References Updated Jun 03, 2024 · Source: OSV.dev |
v1.12.3
patch
Dependencies (23)
+ 15 more |
|
v1.12.2
patch
3 CVEs
CVE-2022-31836
GO-2022-0569
GHSA-95f9-94vc-665h
Aug 23, 2022
Path traversal in github.com/beego/beego and beego/v2 The leafInfo.match() function uses path.join() to deal with wildcard values which can lead to cross directory risk. References Updated May 20, 2024 · Source: OSV.dev
CVE-2021-30080
GO-2022-0572
GHSA-28r6-jm5h-mrgg
Aug 22, 2022
Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2 An issue was discovered in the route lookup process in beego which attackers to bypass access control. References Updated May 20, 2024 · Source: OSV.dev
CVE-2022-31259
GO-2022-0463
GHSA-qx32-f6g6-fcfr
Jul 01, 2022
Access control bypass due to broad route matching in github.com/beego/beego and beego/v2 Routes in the beego HTTP router can match unintended patterns. This overly-broad matching may permit an attacker to bypass access controls. For example, the pattern "/a/b/:name" can match the URL "/a.xml/b/". This may bypass access control applied to the prefix "/a/". References Updated Jun 03, 2024 · Source: OSV.dev |
v1.12.2
patch
Dependencies (23)
+ 15 more |
|
v1.12.1
patch
4 CVEs
CVE-2022-31836
GO-2022-0569
GHSA-95f9-94vc-665h
Aug 23, 2022
Path traversal in github.com/beego/beego and beego/v2 The leafInfo.match() function uses path.join() to deal with wildcard values which can lead to cross directory risk. References Updated May 20, 2024 · Source: OSV.dev
CVE-2021-30080
GO-2022-0572
GHSA-28r6-jm5h-mrgg
Aug 22, 2022
Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2 An issue was discovered in the route lookup process in beego which attackers to bypass access control. References Updated May 20, 2024 · Source: OSV.dev
CVE-2022-31259
GO-2022-0463
GHSA-qx32-f6g6-fcfr
Jul 01, 2022
Access control bypass due to broad route matching in github.com/beego/beego and beego/v2 Routes in the beego HTTP router can match unintended patterns. This overly-broad matching may permit an attacker to bypass access controls. For example, the pattern "/a/b/:name" can match the URL "/a.xml/b/". This may bypass access control applied to the prefix "/a/". References Updated Jun 03, 2024 · Source: OSV.dev
CVE-2019-16354
GHSA-hf4p-4j9r-3cvx
CVE-2019-16355
GHSA-f6px-w8rh-7r89
GO-2021-0084
May 24, 2022
Incorrect Default Permissions in Beego
5.5
/ 10
Medium
Local
Low
Low
None
Unchanged
High
None
None
The File Session Manager in Beego before 1.12.2 allows local users to read session files because of weak permissions for individual files. Fixed in
1.12.2
References
Updated Apr 22, 2024 · Source: OSV.dev |
v1.12.1
patch
Dependencies (19)
+ 11 more |
|
v1.12.0
minor
4 CVEs
CVE-2022-31836
GO-2022-0569
GHSA-95f9-94vc-665h
Aug 23, 2022
Path traversal in github.com/beego/beego and beego/v2 The leafInfo.match() function uses path.join() to deal with wildcard values which can lead to cross directory risk. References Updated May 20, 2024 · Source: OSV.dev
CVE-2021-30080
GO-2022-0572
GHSA-28r6-jm5h-mrgg
Aug 22, 2022
Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2 An issue was discovered in the route lookup process in beego which attackers to bypass access control. References Updated May 20, 2024 · Source: OSV.dev
CVE-2022-31259
GO-2022-0463
GHSA-qx32-f6g6-fcfr
Jul 01, 2022
Access control bypass due to broad route matching in github.com/beego/beego and beego/v2 Routes in the beego HTTP router can match unintended patterns. This overly-broad matching may permit an attacker to bypass access controls. For example, the pattern "/a/b/:name" can match the URL "/a.xml/b/". This may bypass access control applied to the prefix "/a/". References Updated Jun 03, 2024 · Source: OSV.dev
CVE-2019-16354
GHSA-hf4p-4j9r-3cvx
CVE-2019-16355
GHSA-f6px-w8rh-7r89
GO-2021-0084
May 24, 2022
Incorrect Default Permissions in Beego
5.5
/ 10
Medium
Local
Low
Low
None
Unchanged
High
None
None
The File Session Manager in Beego before 1.12.2 allows local users to read session files because of weak permissions for individual files. Fixed in
1.12.2
References
Updated Apr 22, 2024 · Source: OSV.dev |
v1.12.0
minor
Dependencies (18)
+ 10 more |
|
v1.11.1
patch
4 CVEs
CVE-2022-31836
GO-2022-0569
GHSA-95f9-94vc-665h
Aug 23, 2022
Path traversal in github.com/beego/beego and beego/v2 The leafInfo.match() function uses path.join() to deal with wildcard values which can lead to cross directory risk. References Updated May 20, 2024 · Source: OSV.dev
CVE-2021-30080
GO-2022-0572
GHSA-28r6-jm5h-mrgg
Aug 22, 2022
Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2 An issue was discovered in the route lookup process in beego which attackers to bypass access control. References Updated May 20, 2024 · Source: OSV.dev
CVE-2022-31259
GO-2022-0463
GHSA-qx32-f6g6-fcfr
Jul 01, 2022
Access control bypass due to broad route matching in github.com/beego/beego and beego/v2 Routes in the beego HTTP router can match unintended patterns. This overly-broad matching may permit an attacker to bypass access controls. For example, the pattern "/a/b/:name" can match the URL "/a.xml/b/". This may bypass access control applied to the prefix "/a/". References Updated Jun 03, 2024 · Source: OSV.dev
CVE-2019-16354
GHSA-hf4p-4j9r-3cvx
CVE-2019-16355
GHSA-f6px-w8rh-7r89
GO-2021-0084
May 24, 2022
Incorrect Default Permissions in Beego
5.5
/ 10
Medium
Local
Low
Low
None
Unchanged
High
None
None
The File Session Manager in Beego before 1.12.2 allows local users to read session files because of weak permissions for individual files. Fixed in
1.12.2
References
Updated Apr 22, 2024 · Source: OSV.dev |
v1.11.1
patch
Dependencies (18)
+ 10 more |
|
v1.11.0
minor
4 CVEs
CVE-2022-31836
GO-2022-0569
GHSA-95f9-94vc-665h
Aug 23, 2022
Path traversal in github.com/beego/beego and beego/v2 The leafInfo.match() function uses path.join() to deal with wildcard values which can lead to cross directory risk. References Updated May 20, 2024 · Source: OSV.dev
CVE-2021-30080
GO-2022-0572
GHSA-28r6-jm5h-mrgg
Aug 22, 2022
Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2 An issue was discovered in the route lookup process in beego which attackers to bypass access control. References Updated May 20, 2024 · Source: OSV.dev
CVE-2022-31259
GO-2022-0463
GHSA-qx32-f6g6-fcfr
Jul 01, 2022
Access control bypass due to broad route matching in github.com/beego/beego and beego/v2 Routes in the beego HTTP router can match unintended patterns. This overly-broad matching may permit an attacker to bypass access controls. For example, the pattern "/a/b/:name" can match the URL "/a.xml/b/". This may bypass access control applied to the prefix "/a/". References Updated Jun 03, 2024 · Source: OSV.dev
CVE-2019-16354
GHSA-hf4p-4j9r-3cvx
CVE-2019-16355
GHSA-f6px-w8rh-7r89
GO-2021-0084
May 24, 2022
Incorrect Default Permissions in Beego
5.5
/ 10
Medium
Local
Low
Low
None
Unchanged
High
None
None
The File Session Manager in Beego before 1.12.2 allows local users to read session files because of weak permissions for individual files. Fixed in
1.12.2
References
Updated Apr 22, 2024 · Source: OSV.dev |
v1.11.0
minor
Dependencies (18)
+ 10 more |
|
v1.10.1
patch
4 CVEs
CVE-2022-31836
GO-2022-0569
GHSA-95f9-94vc-665h
Aug 23, 2022
Path traversal in github.com/beego/beego and beego/v2 The leafInfo.match() function uses path.join() to deal with wildcard values which can lead to cross directory risk. References Updated May 20, 2024 · Source: OSV.dev
CVE-2021-30080
GO-2022-0572
GHSA-28r6-jm5h-mrgg
Aug 22, 2022
Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2 An issue was discovered in the route lookup process in beego which attackers to bypass access control. References Updated May 20, 2024 · Source: OSV.dev
CVE-2022-31259
GO-2022-0463
GHSA-qx32-f6g6-fcfr
Jul 01, 2022
Access control bypass due to broad route matching in github.com/beego/beego and beego/v2 Routes in the beego HTTP router can match unintended patterns. This overly-broad matching may permit an attacker to bypass access controls. For example, the pattern "/a/b/:name" can match the URL "/a.xml/b/". This may bypass access control applied to the prefix "/a/". References Updated Jun 03, 2024 · Source: OSV.dev
CVE-2019-16354
GHSA-hf4p-4j9r-3cvx
CVE-2019-16355
GHSA-f6px-w8rh-7r89
GO-2021-0084
May 24, 2022
Incorrect Default Permissions in Beego
5.5
/ 10
Medium
Local
Low
Low
None
Unchanged
High
None
None
The File Session Manager in Beego before 1.12.2 allows local users to read session files because of weak permissions for individual files. Fixed in
1.12.2
References
Updated Apr 22, 2024 · Source: OSV.dev |
v1.10.1
patch
|
|
v1.10.0
minor
4 CVEs
CVE-2022-31836
GO-2022-0569
GHSA-95f9-94vc-665h
Aug 23, 2022
Path traversal in github.com/beego/beego and beego/v2 The leafInfo.match() function uses path.join() to deal with wildcard values which can lead to cross directory risk. References Updated May 20, 2024 · Source: OSV.dev
CVE-2021-30080
GO-2022-0572
GHSA-28r6-jm5h-mrgg
Aug 22, 2022
Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2 An issue was discovered in the route lookup process in beego which attackers to bypass access control. References Updated May 20, 2024 · Source: OSV.dev
CVE-2022-31259
GO-2022-0463
GHSA-qx32-f6g6-fcfr
Jul 01, 2022
Access control bypass due to broad route matching in github.com/beego/beego and beego/v2 Routes in the beego HTTP router can match unintended patterns. This overly-broad matching may permit an attacker to bypass access controls. For example, the pattern "/a/b/:name" can match the URL "/a.xml/b/". This may bypass access control applied to the prefix "/a/". References Updated Jun 03, 2024 · Source: OSV.dev
CVE-2019-16354
GHSA-hf4p-4j9r-3cvx
CVE-2019-16355
GHSA-f6px-w8rh-7r89
GO-2021-0084
May 24, 2022
Incorrect Default Permissions in Beego
5.5
/ 10
Medium
Local
Low
Low
None
Unchanged
High
None
None
The File Session Manager in Beego before 1.12.2 allows local users to read session files because of weak permissions for individual files. Fixed in
1.12.2
References
Updated Apr 22, 2024 · Source: OSV.dev |
v1.10.0
minor
|
|
v1.9.2
patch
4 CVEs
CVE-2022-31836
GO-2022-0569
GHSA-95f9-94vc-665h
Aug 23, 2022
Path traversal in github.com/beego/beego and beego/v2 The leafInfo.match() function uses path.join() to deal with wildcard values which can lead to cross directory risk. References Updated May 20, 2024 · Source: OSV.dev
CVE-2021-30080
GO-2022-0572
GHSA-28r6-jm5h-mrgg
Aug 22, 2022
Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2 An issue was discovered in the route lookup process in beego which attackers to bypass access control. References Updated May 20, 2024 · Source: OSV.dev
CVE-2022-31259
GO-2022-0463
GHSA-qx32-f6g6-fcfr
Jul 01, 2022
Access control bypass due to broad route matching in github.com/beego/beego and beego/v2 Routes in the beego HTTP router can match unintended patterns. This overly-broad matching may permit an attacker to bypass access controls. For example, the pattern "/a/b/:name" can match the URL "/a.xml/b/". This may bypass access control applied to the prefix "/a/". References Updated Jun 03, 2024 · Source: OSV.dev
CVE-2019-16354
GHSA-hf4p-4j9r-3cvx
CVE-2019-16355
GHSA-f6px-w8rh-7r89
GO-2021-0084
May 24, 2022
Incorrect Default Permissions in Beego
5.5
/ 10
Medium
Local
Low
Low
None
Unchanged
High
None
None
The File Session Manager in Beego before 1.12.2 allows local users to read session files because of weak permissions for individual files. Fixed in
1.12.2
References
Updated Apr 22, 2024 · Source: OSV.dev |
v1.9.2
patch
|
|
v1.9.0
minor
4 CVEs
CVE-2022-31836
GO-2022-0569
GHSA-95f9-94vc-665h
Aug 23, 2022
Path traversal in github.com/beego/beego and beego/v2 The leafInfo.match() function uses path.join() to deal with wildcard values which can lead to cross directory risk. References Updated May 20, 2024 · Source: OSV.dev
CVE-2021-30080
GO-2022-0572
GHSA-28r6-jm5h-mrgg
Aug 22, 2022
Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2 An issue was discovered in the route lookup process in beego which attackers to bypass access control. References Updated May 20, 2024 · Source: OSV.dev
CVE-2022-31259
GO-2022-0463
GHSA-qx32-f6g6-fcfr
Jul 01, 2022
Access control bypass due to broad route matching in github.com/beego/beego and beego/v2 Routes in the beego HTTP router can match unintended patterns. This overly-broad matching may permit an attacker to bypass access controls. For example, the pattern "/a/b/:name" can match the URL "/a.xml/b/". This may bypass access control applied to the prefix "/a/". References Updated Jun 03, 2024 · Source: OSV.dev
CVE-2019-16354
GHSA-hf4p-4j9r-3cvx
CVE-2019-16355
GHSA-f6px-w8rh-7r89
GO-2021-0084
May 24, 2022
Incorrect Default Permissions in Beego
5.5
/ 10
Medium
Local
Low
Low
None
Unchanged
High
None
None
The File Session Manager in Beego before 1.12.2 allows local users to read session files because of weak permissions for individual files. Fixed in
1.12.2
References
Updated Apr 22, 2024 · Source: OSV.dev |
v1.9.0
minor
|
|
v1.8.3
patch
4 CVEs
CVE-2022-31836
GO-2022-0569
GHSA-95f9-94vc-665h
Aug 23, 2022
Path traversal in github.com/beego/beego and beego/v2 The leafInfo.match() function uses path.join() to deal with wildcard values which can lead to cross directory risk. References Updated May 20, 2024 · Source: OSV.dev
CVE-2021-30080
GO-2022-0572
GHSA-28r6-jm5h-mrgg
Aug 22, 2022
Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2 An issue was discovered in the route lookup process in beego which attackers to bypass access control. References Updated May 20, 2024 · Source: OSV.dev
CVE-2022-31259
GO-2022-0463
GHSA-qx32-f6g6-fcfr
Jul 01, 2022
Access control bypass due to broad route matching in github.com/beego/beego and beego/v2 Routes in the beego HTTP router can match unintended patterns. This overly-broad matching may permit an attacker to bypass access controls. For example, the pattern "/a/b/:name" can match the URL "/a.xml/b/". This may bypass access control applied to the prefix "/a/". References Updated Jun 03, 2024 · Source: OSV.dev
CVE-2019-16354
GHSA-hf4p-4j9r-3cvx
CVE-2019-16355
GHSA-f6px-w8rh-7r89
GO-2021-0084
May 24, 2022
Incorrect Default Permissions in Beego
5.5
/ 10
Medium
Local
Low
Low
None
Unchanged
High
None
None
The File Session Manager in Beego before 1.12.2 allows local users to read session files because of weak permissions for individual files. Fixed in
1.12.2
References
Updated Apr 22, 2024 · Source: OSV.dev |
v1.8.3
patch
|
|
v1.8.2
patch
4 CVEs
CVE-2022-31836
GO-2022-0569
GHSA-95f9-94vc-665h
Aug 23, 2022
Path traversal in github.com/beego/beego and beego/v2 The leafInfo.match() function uses path.join() to deal with wildcard values which can lead to cross directory risk. References Updated May 20, 2024 · Source: OSV.dev
CVE-2021-30080
GO-2022-0572
GHSA-28r6-jm5h-mrgg
Aug 22, 2022
Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2 An issue was discovered in the route lookup process in beego which attackers to bypass access control. References Updated May 20, 2024 · Source: OSV.dev
CVE-2022-31259
GO-2022-0463
GHSA-qx32-f6g6-fcfr
Jul 01, 2022
Access control bypass due to broad route matching in github.com/beego/beego and beego/v2 Routes in the beego HTTP router can match unintended patterns. This overly-broad matching may permit an attacker to bypass access controls. For example, the pattern "/a/b/:name" can match the URL "/a.xml/b/". This may bypass access control applied to the prefix "/a/". References Updated Jun 03, 2024 · Source: OSV.dev
CVE-2019-16354
GHSA-hf4p-4j9r-3cvx
CVE-2019-16355
GHSA-f6px-w8rh-7r89
GO-2021-0084
May 24, 2022
Incorrect Default Permissions in Beego
5.5
/ 10
Medium
Local
Low
Low
None
Unchanged
High
None
None
The File Session Manager in Beego before 1.12.2 allows local users to read session files because of weak permissions for individual files. Fixed in
1.12.2
References
Updated Apr 22, 2024 · Source: OSV.dev |
v1.8.2
patch
|
|
v1.8.1
patch
4 CVEs
CVE-2022-31836
GO-2022-0569
GHSA-95f9-94vc-665h
Aug 23, 2022
Path traversal in github.com/beego/beego and beego/v2 The leafInfo.match() function uses path.join() to deal with wildcard values which can lead to cross directory risk. References Updated May 20, 2024 · Source: OSV.dev
CVE-2021-30080
GO-2022-0572
GHSA-28r6-jm5h-mrgg
Aug 22, 2022
Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2 An issue was discovered in the route lookup process in beego which attackers to bypass access control. References Updated May 20, 2024 · Source: OSV.dev
CVE-2022-31259
GO-2022-0463
GHSA-qx32-f6g6-fcfr
Jul 01, 2022
Access control bypass due to broad route matching in github.com/beego/beego and beego/v2 Routes in the beego HTTP router can match unintended patterns. This overly-broad matching may permit an attacker to bypass access controls. For example, the pattern "/a/b/:name" can match the URL "/a.xml/b/". This may bypass access control applied to the prefix "/a/". References Updated Jun 03, 2024 · Source: OSV.dev
CVE-2019-16354
GHSA-hf4p-4j9r-3cvx
CVE-2019-16355
GHSA-f6px-w8rh-7r89
GO-2021-0084
May 24, 2022
Incorrect Default Permissions in Beego
5.5
/ 10
Medium
Local
Low
Low
None
Unchanged
High
None
None
The File Session Manager in Beego before 1.12.2 allows local users to read session files because of weak permissions for individual files. Fixed in
1.12.2
References
Updated Apr 22, 2024 · Source: OSV.dev |
v1.8.1
patch
|
|
v1.8.0
minor
4 CVEs
CVE-2022-31836
GO-2022-0569
GHSA-95f9-94vc-665h
Aug 23, 2022
Path traversal in github.com/beego/beego and beego/v2 The leafInfo.match() function uses path.join() to deal with wildcard values which can lead to cross directory risk. References Updated May 20, 2024 · Source: OSV.dev
CVE-2021-30080
GO-2022-0572
GHSA-28r6-jm5h-mrgg
Aug 22, 2022
Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2 An issue was discovered in the route lookup process in beego which attackers to bypass access control. References Updated May 20, 2024 · Source: OSV.dev
CVE-2022-31259
GO-2022-0463
GHSA-qx32-f6g6-fcfr
Jul 01, 2022
Access control bypass due to broad route matching in github.com/beego/beego and beego/v2 Routes in the beego HTTP router can match unintended patterns. This overly-broad matching may permit an attacker to bypass access controls. For example, the pattern "/a/b/:name" can match the URL "/a.xml/b/". This may bypass access control applied to the prefix "/a/". References Updated Jun 03, 2024 · Source: OSV.dev
CVE-2019-16354
GHSA-hf4p-4j9r-3cvx
CVE-2019-16355
GHSA-f6px-w8rh-7r89
GO-2021-0084
May 24, 2022
Incorrect Default Permissions in Beego
5.5
/ 10
Medium
Local
Low
Low
None
Unchanged
High
None
None
The File Session Manager in Beego before 1.12.2 allows local users to read session files because of weak permissions for individual files. Fixed in
1.12.2
References
Updated Apr 22, 2024 · Source: OSV.dev |
v1.8.0
minor
|
|
v1.7.2
patch
4 CVEs
CVE-2022-31836
GO-2022-0569
GHSA-95f9-94vc-665h
Aug 23, 2022
Path traversal in github.com/beego/beego and beego/v2 The leafInfo.match() function uses path.join() to deal with wildcard values which can lead to cross directory risk. References Updated May 20, 2024 · Source: OSV.dev
CVE-2021-30080
GO-2022-0572
GHSA-28r6-jm5h-mrgg
Aug 22, 2022
Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2 An issue was discovered in the route lookup process in beego which attackers to bypass access control. References Updated May 20, 2024 · Source: OSV.dev
CVE-2022-31259
GO-2022-0463
GHSA-qx32-f6g6-fcfr
Jul 01, 2022
Access control bypass due to broad route matching in github.com/beego/beego and beego/v2 Routes in the beego HTTP router can match unintended patterns. This overly-broad matching may permit an attacker to bypass access controls. For example, the pattern "/a/b/:name" can match the URL "/a.xml/b/". This may bypass access control applied to the prefix "/a/". References Updated Jun 03, 2024 · Source: OSV.dev
CVE-2019-16354
GHSA-hf4p-4j9r-3cvx
CVE-2019-16355
GHSA-f6px-w8rh-7r89
GO-2021-0084
May 24, 2022
Incorrect Default Permissions in Beego
5.5
/ 10
Medium
Local
Low
Low
None
Unchanged
High
None
None
The File Session Manager in Beego before 1.12.2 allows local users to read session files because of weak permissions for individual files. Fixed in
1.12.2
References
Updated Apr 22, 2024 · Source: OSV.dev |
v1.7.2
patch
|
|
v1.7.1
patch
4 CVEs
CVE-2022-31836
GO-2022-0569
GHSA-95f9-94vc-665h
Aug 23, 2022
Path traversal in github.com/beego/beego and beego/v2 The leafInfo.match() function uses path.join() to deal with wildcard values which can lead to cross directory risk. References Updated May 20, 2024 · Source: OSV.dev
CVE-2021-30080
GO-2022-0572
GHSA-28r6-jm5h-mrgg
Aug 22, 2022
Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2 An issue was discovered in the route lookup process in beego which attackers to bypass access control. References Updated May 20, 2024 · Source: OSV.dev
CVE-2022-31259
GO-2022-0463
GHSA-qx32-f6g6-fcfr
Jul 01, 2022
Access control bypass due to broad route matching in github.com/beego/beego and beego/v2 Routes in the beego HTTP router can match unintended patterns. This overly-broad matching may permit an attacker to bypass access controls. For example, the pattern "/a/b/:name" can match the URL "/a.xml/b/". This may bypass access control applied to the prefix "/a/". References Updated Jun 03, 2024 · Source: OSV.dev
CVE-2019-16354
GHSA-hf4p-4j9r-3cvx
CVE-2019-16355
GHSA-f6px-w8rh-7r89
GO-2021-0084
May 24, 2022
Incorrect Default Permissions in Beego
5.5
/ 10
Medium
Local
Low
Low
None
Unchanged
High
None
None
The File Session Manager in Beego before 1.12.2 allows local users to read session files because of weak permissions for individual files. Fixed in
1.12.2
References
Updated Apr 22, 2024 · Source: OSV.dev |
v1.7.1
patch
|
|
v1.7.0
minor
4 CVEs
CVE-2022-31836
GO-2022-0569
GHSA-95f9-94vc-665h
Aug 23, 2022
Path traversal in github.com/beego/beego and beego/v2 The leafInfo.match() function uses path.join() to deal with wildcard values which can lead to cross directory risk. References Updated May 20, 2024 · Source: OSV.dev
CVE-2021-30080
GO-2022-0572
GHSA-28r6-jm5h-mrgg
Aug 22, 2022
Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2 An issue was discovered in the route lookup process in beego which attackers to bypass access control. References Updated May 20, 2024 · Source: OSV.dev
CVE-2022-31259
GO-2022-0463
GHSA-qx32-f6g6-fcfr
Jul 01, 2022
Access control bypass due to broad route matching in github.com/beego/beego and beego/v2 Routes in the beego HTTP router can match unintended patterns. This overly-broad matching may permit an attacker to bypass access controls. For example, the pattern "/a/b/:name" can match the URL "/a.xml/b/". This may bypass access control applied to the prefix "/a/". References Updated Jun 03, 2024 · Source: OSV.dev
CVE-2019-16354
GHSA-hf4p-4j9r-3cvx
CVE-2019-16355
GHSA-f6px-w8rh-7r89
GO-2021-0084
May 24, 2022
Incorrect Default Permissions in Beego
5.5
/ 10
Medium
Local
Low
Low
None
Unchanged
High
None
None
The File Session Manager in Beego before 1.12.2 allows local users to read session files because of weak permissions for individual files. Fixed in
1.12.2
References
Updated Apr 22, 2024 · Source: OSV.dev |
v1.7.0
minor
|
|
v1.6.1
patch
4 CVEs
CVE-2022-31836
GO-2022-0569
GHSA-95f9-94vc-665h
Aug 23, 2022
Path traversal in github.com/beego/beego and beego/v2 The leafInfo.match() function uses path.join() to deal with wildcard values which can lead to cross directory risk. References Updated May 20, 2024 · Source: OSV.dev
CVE-2021-30080
GO-2022-0572
GHSA-28r6-jm5h-mrgg
Aug 22, 2022
Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2 An issue was discovered in the route lookup process in beego which attackers to bypass access control. References Updated May 20, 2024 · Source: OSV.dev
CVE-2022-31259
GO-2022-0463
GHSA-qx32-f6g6-fcfr
Jul 01, 2022
Access control bypass due to broad route matching in github.com/beego/beego and beego/v2 Routes in the beego HTTP router can match unintended patterns. This overly-broad matching may permit an attacker to bypass access controls. For example, the pattern "/a/b/:name" can match the URL "/a.xml/b/". This may bypass access control applied to the prefix "/a/". References Updated Jun 03, 2024 · Source: OSV.dev
CVE-2019-16354
GHSA-hf4p-4j9r-3cvx
CVE-2019-16355
GHSA-f6px-w8rh-7r89
GO-2021-0084
May 24, 2022
Incorrect Default Permissions in Beego
5.5
/ 10
Medium
Local
Low
Low
None
Unchanged
High
None
None
The File Session Manager in Beego before 1.12.2 allows local users to read session files because of weak permissions for individual files. Fixed in
1.12.2
References
Updated Apr 22, 2024 · Source: OSV.dev |
v1.6.1
patch
|
|
v1.6.0
minor
4 CVEs
CVE-2022-31836
GO-2022-0569
GHSA-95f9-94vc-665h
Aug 23, 2022
Path traversal in github.com/beego/beego and beego/v2 The leafInfo.match() function uses path.join() to deal with wildcard values which can lead to cross directory risk. References Updated May 20, 2024 · Source: OSV.dev
CVE-2021-30080
GO-2022-0572
GHSA-28r6-jm5h-mrgg
Aug 22, 2022
Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2 An issue was discovered in the route lookup process in beego which attackers to bypass access control. References Updated May 20, 2024 · Source: OSV.dev
CVE-2022-31259
GO-2022-0463
GHSA-qx32-f6g6-fcfr
Jul 01, 2022
Access control bypass due to broad route matching in github.com/beego/beego and beego/v2 Routes in the beego HTTP router can match unintended patterns. This overly-broad matching may permit an attacker to bypass access controls. For example, the pattern "/a/b/:name" can match the URL "/a.xml/b/". This may bypass access control applied to the prefix "/a/". References Updated Jun 03, 2024 · Source: OSV.dev
CVE-2019-16354
GHSA-hf4p-4j9r-3cvx
CVE-2019-16355
GHSA-f6px-w8rh-7r89
GO-2021-0084
May 24, 2022
Incorrect Default Permissions in Beego
5.5
/ 10
Medium
Local
Low
Low
None
Unchanged
High
None
None
The File Session Manager in Beego before 1.12.2 allows local users to read session files because of weak permissions for individual files. Fixed in
1.12.2
References
Updated Apr 22, 2024 · Source: OSV.dev |
v1.6.0
minor
|
|
v1.5.0
initial
4 CVEs
CVE-2022-31836
GO-2022-0569
GHSA-95f9-94vc-665h
Aug 23, 2022
Path traversal in github.com/beego/beego and beego/v2 The leafInfo.match() function uses path.join() to deal with wildcard values which can lead to cross directory risk. References Updated May 20, 2024 · Source: OSV.dev
CVE-2021-30080
GO-2022-0572
GHSA-28r6-jm5h-mrgg
Aug 22, 2022
Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2 An issue was discovered in the route lookup process in beego which attackers to bypass access control. References Updated May 20, 2024 · Source: OSV.dev
CVE-2022-31259
GO-2022-0463
GHSA-qx32-f6g6-fcfr
Jul 01, 2022
Access control bypass due to broad route matching in github.com/beego/beego and beego/v2 Routes in the beego HTTP router can match unintended patterns. This overly-broad matching may permit an attacker to bypass access controls. For example, the pattern "/a/b/:name" can match the URL "/a.xml/b/". This may bypass access control applied to the prefix "/a/". References Updated Jun 03, 2024 · Source: OSV.dev
CVE-2019-16354
GHSA-hf4p-4j9r-3cvx
CVE-2019-16355
GHSA-f6px-w8rh-7r89
GO-2021-0084
May 24, 2022
Incorrect Default Permissions in Beego
5.5
/ 10
Medium
Local
Low
Low
None
Unchanged
High
None
None
The File Session Manager in Beego before 1.12.2 allows local users to read session files because of weak permissions for individual files. Fixed in
1.12.2
References
Updated Apr 22, 2024 · Source: OSV.dev |
v1.5.0
initial
|