Executive brief
Incorrect permissions for critical resource in github.com/astaxie/beego
Affected products
- Go github.com/astaxie/beego
- Go github.com/beego/beego
CVE identifiers
- CVE-2019-16355
- CVE-2019-16354
Junglewise Threat Intelligence
CVE-2019-16355: GO-2021-0084 - Incorrect permissions for critical resource in github.com/astaxie/beego
CVE-2019-16355 · Severity: low · CVSS 3.1 · Published 2021-04-14
Technologies: github.com/astaxie/beego (Go), github.com/beego/beego (Go). Vendors: Go.
Related threats
- GO-2025-3585 - Beego allows Reflected/Stored XSS in Beego's RenderForm() Function Due to Unescaped User Input in github.com/beego/beego
- GO-2024-3331 - Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego
- GO-2022-0569 - Path traversal in github.com/beego/beego and beego/v2
- GO-2022-0572 - Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2
- GO-2022-0463 - Access control bypass due to broad route matching in github.com/beego/beego and beego/v2