| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/astaxie/beego | < 1.12.2 | 1.12.2 |
| github.com/beego/beego | < 1.12.2 | 1.12.2 |
| beego | = 1.10.0 |
The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation within a directory with weak permissions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free