Vulnerabilities > Beego > Beego > 1.2.0

DATE CVE VULNERABILITY TITLE RISK
2024-07-31 CVE-2024-40464 Improper Certificate Validation vulnerability in Beego
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go file
network
low complexity
beego CWE-295
8.8
2024-07-31 CVE-2024-40465 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Beego
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the getCacheFileName function in file.go file
network
low complexity
beego CWE-327
8.8
2022-07-05 CVE-2022-31836 Path Traversal vulnerability in Beego
The leafInfo.match() function in Beego v2.0.3 and below uses path.join() to deal with wildcardvalues which can lead to cross directory risk.
network
low complexity
beego CWE-22
critical
9.8
2022-05-21 CVE-2022-31259 Unspecified vulnerability in Beego
The route lookup process in beego before 1.12.9 and 2.x before 2.0.3 allows attackers to bypass access control.
network
low complexity
beego
critical
9.8
2022-04-05 CVE-2021-27116 Link Following vulnerability in Beego
An issue was discovered in file profile.go in function MemProf in beego through 2.0.2, allows attackers to launch symlink attacks locally.
local
low complexity
beego CWE-59
7.8
2022-04-05 CVE-2021-27117 Link Following vulnerability in Beego
An issue was discovered in file profile.go in function GetCPUProfile in beego through 2.0.2, allows attackers to launch symlink attacks locally.
local
low complexity
beego CWE-59
7.8
2022-04-05 CVE-2021-30080 Unspecified vulnerability in Beego
An issue was discovered in the route lookup process in beego before 1.12.11 that allows attackers to bypass access control.
network
low complexity
beego
critical
9.8