Lucene search

K
osvGoogleOSV:GHSA-FFJP-66MX-3QPJ
HistoryApr 06, 2022 - 12:01 a.m.

Privilege escalation in beego

2022-04-0600:01:30
Google
osv.dev
12

0.0005 Low

EPSS

Percentile

18.0%

An issue was discovered in file profile.go. The MemProf and GetCPUProfile functions do not correctly check whether the created file exists. As a result attackers can launch attacks symlink attacks locally. Attackers can use this vulnerability to escalate privileges.

0.0005 Low

EPSS

Percentile

18.0%