GitHub Advisoryadvisory · Go

GHSA-28r6-jm5h-mrgg Access control bypass in Beego

HIGH Published 2022-04-06 Modified 2022-04-07 Official page ↗

Aliases: CVE-2021-30080
Ecosystem: Go
Packages: github.com/beego/beego/v2, github.com/beego/beego
Severity: High
Reviewed: 2022-04-07

Affected packages

• Go github.com/beego/beego/v2: >= 2.0.0, < 2.0.3 → fixed in 2.0.3 • Go github.com/beego/beego: <= 1.12.11 (no fix yet)

Description

An issue was discovered in the route lookup process in beego through 2.0.1, allows attackers to bypass access control.

Related

Alias · CVE (1)

CVE-2021-30080 An issue was discovered in the route lookup process in beego before 1.12.11 that allows attackers to bypass access control. vulnerability

References