beego records
12 published records for vendor beego.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-327 Use of a Broken or Risky Cryptographic Algorithm2
- CWE-59 Improper Link Resolution Before File Access ('Link Following')2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1
- CWE-276 Incorrect Default Permissions1
The weakness classes this vendor ships most often: where to look.
CWEAll records
12 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
46Plan | CVE-2022-31259No exploit | The route lookup process in beego before 1.12.9 and 2.x before 2.0.3 allows attackers to bypass access control.beego · beego | Critical9.8 | — | 22.1% | May 21, 2022 |
39Monitor | CVE-2022-31836No exploit | The leafInfo.match() function in Beego v2.0.3 and below uses path.join() to deal with wildcardvalues which can lead to cross directory risk.beego · beego · CWE-22 | Critical9.8 | — | 1.6% | Jul 5, 2022 |
39Monitor | CVE-2021-30080No exploit | An issue was discovered in the route lookup process in beego before 1.12.11 that allows attackers to bypass access control.beego · beego | Critical9.8 | — | 1.2% | Apr 5, 2022 |
38Monitor | CVE-2025-30223No exploit | Beego allows Reflected/Stored XSS in Beego's RenderForm() Function Due to Unescaped User Inputbeego · beego · CWE-79 | Critical9.6 | — | 0.6% | Mar 31, 2025 |
35Monitor | CVE-2024-40464No exploit | An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smbeego · beego · CWE-295 | High8.8 | — | 0.5% | Jul 31, 2024 |
35Monitor | CVE-2024-40465No exploit | An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the getCacheFileName function in file.go filebeego · beego · CWE-327 | High8.8 | — | 0.4% | Jul 31, 2024 |
31Monitor | CVE-2021-27117No exploit | An issue was discovered in file profile.go in function GetCPUProfile in beego through 2.0.2, allows attackers to launch symlink attacks locabeego · beego · CWE-59 | High7.8 | — | 0.4% | Apr 5, 2022 |
31Monitor | CVE-2021-27116No exploit | An issue was discovered in file profile.go in function MemProf in beego through 2.0.2, allows attackers to launch symlink attacks locally.beego · beego · CWE-59 | High7.8 | — | 0.4% | Apr 5, 2022 |
27Monitor | CVE-2024-55885No exploit | Beego Vulnerable to Collision Hazards of MD5 in Cache Key Filenamesbeego · beego · CWE-327 | Medium6.9 | — | 0.3% | Dec 12, 2024 |
24Monitor | CVE-2021-39391No exploit | Cross Site Scripting (XSS) vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated bbeego · beego · CWE-79 | Medium6.1 | — | 0.7% | Sep 14, 2021 |
22Monitor | CVE-2019-16355No exploit | The File Session Manager in Beego 1.10.0 allows local users to read session files because of weak permissions for individual files.beego · beego · CWE-276 | Medium5.5 | — | 0.3% | Sep 16, 2019 |
18Monitor | CVE-2019-16354No exploit | The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation beego · beego · CWE-362 | Medium4.7 | — | 0.1% | Sep 16, 2019 |
- CVE-2022-3125946Plan
The route lookup process in beego before 1.12.9 and 2.x before 2.0.3 allows attackers to bypass access control.
CriticalCVSS 9.8No exploitEPSS 22%beego · beegoMay 21, 2022
- CVE-2022-3183639Monitor
The leafInfo.match() function in Beego v2.0.3 and below uses path.join() to deal with wildcardvalues which can lead to cross directory risk.
CriticalCVSS 9.8No exploitEPSS 1%beego · beegoJul 5, 2022
- CVE-2021-3008039Monitor
An issue was discovered in the route lookup process in beego before 1.12.11 that allows attackers to bypass access control.
CriticalCVSS 9.8No exploitEPSS 1%beego · beegoApr 5, 2022
- CVE-2025-3022338Monitor
Beego allows Reflected/Stored XSS in Beego's RenderForm() Function Due to Unescaped User Input
CriticalCVSS 9.6No exploitEPSS 0%beego · beegoMar 31, 2025
- CVE-2024-4046435Monitor
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/sm
HighCVSS 8.8No exploitEPSS 0%beego · beegoJul 31, 2024
- CVE-2024-4046535Monitor
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the getCacheFileName function in file.go file
HighCVSS 8.8No exploitEPSS 0%beego · beegoJul 31, 2024
- CVE-2021-2711731Monitor
An issue was discovered in file profile.go in function GetCPUProfile in beego through 2.0.2, allows attackers to launch symlink attacks loca
HighCVSS 7.8No exploitEPSS 0%beego · beegoApr 5, 2022
- CVE-2021-2711631Monitor
An issue was discovered in file profile.go in function MemProf in beego through 2.0.2, allows attackers to launch symlink attacks locally.
HighCVSS 7.8No exploitEPSS 0%beego · beegoApr 5, 2022
- CVE-2024-5588527Monitor
Beego Vulnerable to Collision Hazards of MD5 in Cache Key Filenames
MediumCVSS 6.9No exploitEPSS 0%beego · beegoDec 12, 2024
- CVE-2021-3939124Monitor
Cross Site Scripting (XSS) vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated b
MediumCVSS 6.1No exploitEPSS 0%beego · beegoSep 14, 2021
- CVE-2019-1635522Monitor
The File Session Manager in Beego 1.10.0 allows local users to read session files because of weak permissions for individual files.
MediumCVSS 5.5No exploitEPSS 0%beego · beegoSep 16, 2019
- CVE-2019-1635418Monitor
The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation
MediumCVSS 4.7No exploitEPSS 0%beego · beegoSep 16, 2019