high7.8
CVE-2021-27116
Privilege escalation in beego
Impact
An issue was discovered in file profile.go. The MemProf and GetCPUProfile functions do not correctly check whether the created file exists. As a result attackers can launch attacks symlink attacks locally. Attackers can use this vulnerability to escalate privileges.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/beego/beego/v2 | >= 2.0.0, < 2.0.2 | 2.0.2 |
| go | github.com/beego/beego | < 2.0.2 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Beego | Beego | through 2.0.2 |