High · 7.8 CVE-2021-27116 EUVD-2022-1723GHSA-ffjp-66mx-3qpj

Privilege escalation in beego

Published Apr 5, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

An issue was discovered in file profile.go in function MemProf in beego through 2.0.2, allows attackers to launch symlink attacks locally.

Ecosystem	Package	Affected	Fixed	Record
Go	github.com/beego/beego	all versions	—	GHSA-ffjp-66mx-3qpj
Go	github.com/beego/beego/v2	>= 2.0.0, < 2.0.2	2.0.2	GHSA-ffjp-66mx-3qpj