high7.8
CVE-2021-27117
Privilege escalation in beego
Impact
beego is an open-source, high-performance web framework for the Go programming language. An issue was discovered in file profile.go in function GetCPUProfile in beego through 2.0.2, allows attackers to launch symlink attacks locally.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/beego/beego/v2 | >= 2.0.0, < 2.0.2 | 2.0.2 |
| go | github.com/beego/beego | < 2.0.2 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Beego | Beego | through 2.0.2 |