| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/beego/beego | all versions | |
| github.com/beego/beego/v2 | ≥ 2.0.0, < 2.0.2 | 2.0.2 |
| beego | ≤ 2.0.2 |
An issue was discovered in file profile.go. The MemProf and GetCPUProfile functions do not correctly check whether the created file exists. As a result attackers can launch attacks symlink attacks locally. Attackers can use this vulnerability to escalate privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free