Go modules package
github.com/astaxie/beego
pkg:golang/github.com/astaxie/beego
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2019-16355 | Med | 5.5 | < 1.12.2 | 1.12.2 | Sep 16, 2019 | The File Session Manager in Beego 1.10.0 allows local users to read session files because of weak permissions for individual files. | |
| CVE-2019-16354 | Med | 4.7 | < 1.12.2 | 1.12.2 | Sep 16, 2019 | The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation within a directory with weak permissions. |
- affected < 1.12.2fixed 1.12.2
The File Session Manager in Beego 1.10.0 allows local users to read session files because of weak permissions for individual files.
- affected < 1.12.2fixed 1.12.2
The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation within a directory with weak permissions.