Executive brief
Access control bypass due to broad route matching in github.com/beego/beego and beego/v2
Affected products
- Go github.com/astaxie/beego
- Go github.com/beego/beego
- Go github.com/beego/beego/v2
Junglewise Threat Intelligence
CVE-2022-31259: GO-2022-0463 - Access control bypass due to broad route matching in github.com/beego/beego and beego/v2
CVE-2022-31259 · Severity: low · CVSS 3.1 · Published 2022-07-01
Technologies: github.com/astaxie/beego (Go), github.com/beego/beego (Go), github.com/beego/beego/v2 (Go). Vendors: Go.
Related threats
- GO-2025-3585 - Beego allows Reflected/Stored XSS in Beego's RenderForm() Function Due to Unescaped User Input in github.com/beego/beego
- GO-2024-3331 - Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego
- GO-2024-3016 - Beego privilege escalation vulnerability via sendMail in github.com/beego/beego/v2
- Beego privilege escalation vulnerability
- GO-2022-0569 - Path traversal in github.com/beego/beego and beego/v2