Search Results (5 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-30080 1 Beego 1 Beego 2024-11-21 9.8 Critical
An issue was discovered in the route lookup process in beego before 1.12.11 that allows attackers to bypass access control.
CVE-2021-27117 1 Beego 1 Beego 2024-11-21 7.8 High
An issue was discovered in file profile.go in function GetCPUProfile in beego through 2.0.2, allows attackers to launch symlink attacks locally.
CVE-2021-27116 1 Beego 1 Beego 2024-11-21 7.8 High
An issue was discovered in file profile.go in function MemProf in beego through 2.0.2, allows attackers to launch symlink attacks locally.
CVE-2019-16355 1 Beego 1 Beego 2024-11-21 5.5 Medium
The File Session Manager in Beego 1.10.0 allows local users to read session files because of weak permissions for individual files.
CVE-2019-16354 1 Beego 1 Beego 2024-11-21 4.7 Medium
The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation within a directory with weak permissions.