Description

An issue was discovered in file profile.go in function GetCPUProfile in beego through 2.0.2, allows attackers to launch symlink attacks locally.

Remediation

References

CVE-2021-27117

Related Vulnerabilities

WordPress Plugin WP OAuth Server (OAuth Authentication) Security Bypass (3.1.4)

WordPress Plugin N5 Upload Form Arbitrary File Upload (1.0)

WordPress Plugin Royal Gallery 'upload.php' Arbitrary File Upload (2.1)

MediaWiki Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-5687)

WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder SQL Injection (1.07.12)

Severity

High

Classification

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-59 CVE-2021-27117