Lucene search
Veracode Vulnerability DatabaseVERACODE:34983HistoryApr 06, 2022 - 6:36 a.m.
Symlink Attack
2022-04-0606:36:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
20
0.0005 Low
EPSS
Percentile
18.0%
github.com/beego/beego is vulnerable to symlink attack. Lack of sufficient check for the existence of files created allows an attacker to use MemProf and GetCPUProfile commands to trigger the symbolic link attack locally.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/beego/beego | le | v2.0.7 | |
| github.com/beego/beego | le | v2.0.7 |
References
Related
gitlab
gitlab
Improper Link Resolution Before File Access ('Link Following')
2022-04-06 00:00:00
Improper Link Resolution Before File Access ('Link Following')
2022-04-06 00:00:00
prion
prion
Design/Logic Flaw
2022-04-05 16:15:00
cvelist
cvelist
CVE-2021-27117
2022-04-05 15:36:37
nvd
nvd
CVE-2021-27117
2022-04-05 16:15:11
cve
cve
CVE-2021-27117
2022-04-05 16:15:11
github
github
Privilege escalation in beego
2022-04-06 00:01:30
osv
osv
Privilege escalation in beego
2022-04-06 00:01:30
CVE-2021-27117
2022-04-05 16:15:11
