beego kayıtları
beego üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-327 Use of a Broken or Risky Cryptographic Algorithm2
- CWE-59 Improper Link Resolution Before File Access ('Link Following')2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1
- CWE-276 Incorrect Default Permissions1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
46Planlayın | CVE-2022-31259İstismar yok | The route lookup process in beego before 1.12.9 and 2.x before 2.0.3 allows attackers to bypass access control.beego · beego | Kritik9,8 | — | %22,1 | 21 May 2022 |
39İzleyin | CVE-2022-31836İstismar yok | The leafInfo.match() function in Beego v2.0.3 and below uses path.join() to deal with wildcardvalues which can lead to cross directory risk.beego · beego · CWE-22 | Kritik9,8 | — | %1,6 | 5 Tem 2022 |
39İzleyin | CVE-2021-30080İstismar yok | An issue was discovered in the route lookup process in beego before 1.12.11 that allows attackers to bypass access control.beego · beego | Kritik9,8 | — | %1,2 | 5 Nis 2022 |
38İzleyin | CVE-2025-30223İstismar yok | Beego allows Reflected/Stored XSS in Beego's RenderForm() Function Due to Unescaped User Inputbeego · beego · CWE-79 | Kritik9,6 | — | %0,6 | 31 Mar 2025 |
35İzleyin | CVE-2024-40464İstismar yok | An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smbeego · beego · CWE-295 | Yüksek8,8 | — | %0,5 | 31 Tem 2024 |
35İzleyin | CVE-2024-40465İstismar yok | An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the getCacheFileName function in file.go filebeego · beego · CWE-327 | Yüksek8,8 | — | %0,4 | 31 Tem 2024 |
31İzleyin | CVE-2021-27117İstismar yok | An issue was discovered in file profile.go in function GetCPUProfile in beego through 2.0.2, allows attackers to launch symlink attacks locabeego · beego · CWE-59 | Yüksek7,8 | — | %0,4 | 5 Nis 2022 |
31İzleyin | CVE-2021-27116İstismar yok | An issue was discovered in file profile.go in function MemProf in beego through 2.0.2, allows attackers to launch symlink attacks locally.beego · beego · CWE-59 | Yüksek7,8 | — | %0,4 | 5 Nis 2022 |
27İzleyin | CVE-2024-55885İstismar yok | Beego Vulnerable to Collision Hazards of MD5 in Cache Key Filenamesbeego · beego · CWE-327 | Orta6,9 | — | %0,3 | 12 Ara 2024 |
24İzleyin | CVE-2021-39391İstismar yok | Cross Site Scripting (XSS) vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated bbeego · beego · CWE-79 | Orta6,1 | — | %0,7 | 14 Eyl 2021 |
22İzleyin | CVE-2019-16355İstismar yok | The File Session Manager in Beego 1.10.0 allows local users to read session files because of weak permissions for individual files.beego · beego · CWE-276 | Orta5,5 | — | %0,3 | 16 Eyl 2019 |
18İzleyin | CVE-2019-16354İstismar yok | The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation beego · beego · CWE-362 | Orta4,7 | — | %0,1 | 16 Eyl 2019 |
- CVE-2022-3125946Planlayın
The route lookup process in beego before 1.12.9 and 2.x before 2.0.3 allows attackers to bypass access control.
KritikCVSS 9,8İstismar yokEPSS %22beego · beego21 May 2022
- CVE-2022-3183639İzleyin
The leafInfo.match() function in Beego v2.0.3 and below uses path.join() to deal with wildcardvalues which can lead to cross directory risk.
KritikCVSS 9,8İstismar yokEPSS %1beego · beego5 Tem 2022
- CVE-2021-3008039İzleyin
An issue was discovered in the route lookup process in beego before 1.12.11 that allows attackers to bypass access control.
KritikCVSS 9,8İstismar yokEPSS %1beego · beego5 Nis 2022
- CVE-2025-3022338İzleyin
Beego allows Reflected/Stored XSS in Beego's RenderForm() Function Due to Unescaped User Input
KritikCVSS 9,6İstismar yokEPSS %0beego · beego31 Mar 2025
- CVE-2024-4046435İzleyin
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/sm
YüksekCVSS 8,8İstismar yokEPSS %0beego · beego31 Tem 2024
- CVE-2024-4046535İzleyin
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the getCacheFileName function in file.go file
YüksekCVSS 8,8İstismar yokEPSS %0beego · beego31 Tem 2024
- CVE-2021-2711731İzleyin
An issue was discovered in file profile.go in function GetCPUProfile in beego through 2.0.2, allows attackers to launch symlink attacks loca
YüksekCVSS 7,8İstismar yokEPSS %0beego · beego5 Nis 2022
- CVE-2021-2711631İzleyin
An issue was discovered in file profile.go in function MemProf in beego through 2.0.2, allows attackers to launch symlink attacks locally.
YüksekCVSS 7,8İstismar yokEPSS %0beego · beego5 Nis 2022
- CVE-2024-5588527İzleyin
Beego Vulnerable to Collision Hazards of MD5 in Cache Key Filenames
OrtaCVSS 6,9İstismar yokEPSS %0beego · beego12 Ara 2024
- CVE-2021-3939124İzleyin
Cross Site Scripting (XSS) vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated b
OrtaCVSS 6,1İstismar yokEPSS %0beego · beego14 Eyl 2021
- CVE-2019-1635522İzleyin
The File Session Manager in Beego 1.10.0 allows local users to read session files because of weak permissions for individual files.
OrtaCVSS 5,5İstismar yokEPSS %0beego · beego16 Eyl 2019
- CVE-2019-1635418İzleyin
The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation
OrtaCVSS 4,7İstismar yokEPSS %0beego · beego16 Eyl 2019