High · 7.8 CVE-2021-27117 EUVD-2022-1598GHSA-2v6v-q994-xvxx

Privilege escalation in beego

Published Apr 5, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

An issue was discovered in file profile.go in function GetCPUProfile in beego through 2.0.2, allows attackers to launch symlink attacks locally.

Ecosystem	Package	Affected	Fixed	Record
Go	github.com/beego/beego	all versions	—	GHSA-2v6v-q994-xvxx
Go	github.com/beego/beego/v2	>= 2.0.0, < 2.0.2	2.0.2	GHSA-2v6v-q994-xvxx