~ / search / GHSA-f6px-w8rh-7r89

GHSA-f6px-w8rh-7r89

Beego has a file creation race condition

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-16354

Packages

EcosystemPackageAffectedFixed in
Go github.com/beego/beego < 1.12.2 1.12.2
Go github.com/astaxie/beego < 1.12.2 1.12.2

Details

As written in the advisory (Markdown source, shown as plain text).

The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation within a directory with weak permissions.

References

External links from the advisory. They lead to third-party sites.