CVE-2021-30080

EUVD-2022-1592
An issue was discovered in the route lookup process in beego before 1.12.11 that allows attackers to bypass access control.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 62%
Affected Products (NVD)
VendorProductVersion
beegobeego
𝑥
≤ 2.0.1
𝑥
= Vulnerable software versions
References
https://github.com/beego/beego/commit/d5df5e470d0a8ed291930ae802fd7e6b95226519
https://github.com/beego/beego/releases/tag/v1.12.11
https://github.com/beego/beego/commit/d5df5e470d0a8ed291930ae802fd7e6b95226519
https://github.com/beego/beego/releases/tag/v1.12.11