Lucene search
GoogleOSV:GHSA-F6PX-W8RH-7R89HistoryAug 02, 2021 - 5:15 p.m.
Beego has a file creation race condition
2021-08-0217:15:05
Google
osv.dev
6
0.0004 Low
EPSS
Percentile
5.1%
The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation within a directory with weak permissions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/beego/beego | lt | 1.12.2 | |
| github.com/astaxie/beego | lt | 1.12.2 |
References
github.com/astaxie/beego
github.com/astaxie/beego/blob/v1.12.2/session/sess_file.go#L142
github.com/astaxie/beego/commit/f99cbe0fa40936f2f8dd28e70620c559b6e5e2fd
github.com/astaxie/beego/issues/3763
github.com/beego/beego/commit/bac2b31afecc65d9a89f9e473b8006c5edc0c8d1
github.com/beego/beego/issues/3763
github.com/beego/beego/pull/3975
github.com/beego/beego/pull/3975/commits/f99cbe0fa40936f2f8dd28e70620c559b6e5e2fd
nvd.nist.gov/vuln/detail/CVE-2019-16354
pkg.go.dev/vuln/GO-2021-0084
Related
osv
osv
Incorrect permissions for critical resource in github.com/astaxie/beego
2021-04-14 20:04:52
CVE-2019-16354
2019-09-16 15:15:10
CVE-2019-16355
2019-09-16 15:15:10
github
github
Beego has a file creation race condition
2021-08-02 17:15:05
Incorrect Default Permissions in Beego
2022-05-24 22:00:36
cvelist
cvelist
CVE-2019-16354
2019-09-16 14:10:55
CVE-2019-16355
2019-09-16 14:12:22
gitlab
gitlab
Incorrect Permission Assignment for Critical Resource
2021-08-02 00:00:00
Incorrect Default Permissions
2019-09-16 00:00:00
veracode
veracode
Insecure Session Management
2019-09-17 03:01:37
Information Disclosure
2019-09-17 02:52:08
prion
prion
Race condition
2019-09-16 15:15:00
Session fixation
2019-09-16 15:15:00
cve
cve
CVE-2019-16355
2019-09-16 15:15:10
CVE-2019-16354
2019-09-16 15:15:10
nvd
nvd
CVE-2019-16354
2019-09-16 15:15:10
CVE-2019-16355
2019-09-16 15:15:10