CVE-2021-30080

An issue was discovered in the route lookup process in beego before 1.12.11 that allows attackers to bypass access control.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
VendorProductVersion
beegobeego
𝑥
≤ 2.0.1
𝑥
= Vulnerable software versions
References
https://github.com/beego/beego/commit/d5df5e470d0a8ed291930ae802fd7e6b95226519
https://github.com/beego/beego/releases/tag/v1.12.11
https://github.com/beego/beego/commit/d5df5e470d0a8ed291930ae802fd7e6b95226519
https://github.com/beego/beego/releases/tag/v1.12.11