Lucene search
Veracode Vulnerability DatabaseVERACODE:34986HistoryApr 06, 2022 - 8:36 a.m.
Symlink Attack
2022-04-0608:36:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.0005 Low
EPSS
Percentile
18.0%
github.com/beego/beego is vulnerable to symlink attack. Lack of sufficient check for the existence of files created allows an attacker to use MemProf command to trigger the symbolic link attack locally.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/beego/beego | le | v2.0.7 | |
| github.com/beego/beego | le | v2.0.7 |
References
Related
github
github
Privilege escalation in beego
2022-04-06 00:01:30
cvelist
cvelist
CVE-2021-27116
2022-04-05 15:36:55
prion
prion
Design/Logic Flaw
2022-04-05 16:15:00
gitlab
gitlab
Improper Link Resolution Before File Access ('Link Following')
2022-04-06 00:00:00
Improper Link Resolution Before File Access ('Link Following')
2022-04-06 00:00:00
osv
osv
Privilege escalation in beego
2022-04-06 00:01:30
CVE-2021-27116
2022-04-05 16:15:11
cve
cve
CVE-2021-27116
2022-04-05 16:15:11
nvd
nvd
CVE-2021-27116
2022-04-05 16:15:11
