TI-2025-21559 CVE-2025-30223 · GHSA-2j42-h78h-q4fg
Beego allows Reflected/Stored XSS in Beego's RenderForm() Function Due to Unescaped User Input
Priority HIGH 76
Beego is an open-source web framework for the Go programming language.
beego
Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
beego records in CISA KEVNo beego vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
12 records
TI-2022-13292 CVE-2022-31259 · GHSA-qx32-f6g6-fcfr
The route lookup process in beego before 1.12.9 and 2.x before 2.0.3 allows attackers to…
Priority MEDIUM 62
The route lookup process in beego before 1.12.9 and 2.x before 2.0.3 allows attackers to bypass access control.
TI-2022-13707 CVE-2022-31836 · GHSA-95f9-94vc-665h
The leafInfo.match() function in Beego v2.0.3 and below uses path.join() to deal with…
Priority MEDIUM 45
The leafInfo.match() function in Beego v2.0.3 and below uses path.join() to deal with wildcardvalues which can lead to cross directory risk.
TI-2021-10653 CVE-2021-30080 · GHSA-28r6-jm5h-mrgg
An issue was discovered in the route lookup process in beego before 1.12.11 that allows…
Priority MEDIUM 45
An issue was discovered in the route lookup process in beego before 1.12.11 that allows attackers to bypass access control.
TI-2024-26936 CVE-2024-40464 · GHSA-r6qh-j42j-pw64
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via…
Priority MEDIUM 41
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go file
TI-2024-26937 CVE-2024-40465 · GHSA-wr3p-r5fj-wf97
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via…
Priority MEDIUM 40
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the getCacheFileName function in file.go file
TI-2024-36951 CVE-2024-55885 · GHSA-9j3m-fr7q-jxfw
Beego Vulnerable to Collision Hazards of MD5 in Cache Key Filenames
Priority LOW 36
beego is an open-source web framework for the Go programming language.
TI-2021-08677 CVE-2021-27117 · GHSA-2v6v-q994-xvxx
An issue was discovered in file profile.go in function GetCPUProfile in beego through…
Priority LOW 34
An issue was discovered in file profile.go in function GetCPUProfile in beego through 2.0.2, allows attackers to launch symlink attacks locally.
TI-2021-08676 CVE-2021-27116 · GHSA-ffjp-66mx-3qpj
An issue was discovered in file profile.go in function MemProf in beego through 2.0.2…
Priority LOW 34
An issue was discovered in file profile.go in function MemProf in beego through 2.0.2, allows attackers to launch symlink attacks locally.
TI-2021-16746 CVE-2021-39391 · GHSA-c77f-4rgj-jfr4
Cross Site Scripting (XSS) vulnerability exists in the admin panel in Beego v2.0.1 via…
Priority LOW 29
Cross Site Scripting (XSS) vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated by administrators viewing the "Request Statistics" page.
TI-2019-12309 CVE-2019-16355 · GHSA-hf4p-4j9r-3cvx
The File Session Manager in Beego 1.10.0 allows local users to read session files because…
Priority LOW 25
The File Session Manager in Beego 1.10.0 allows local users to read session files because of weak permissions for individual files.
TI-2019-12308 CVE-2019-16354 · GHSA-f6px-w8rh-7r89
The File Session Manager in Beego 1.10.0 allows local users to read session files because…
Priority LOW 21
The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation within a directory with weak permissions.