Description
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the getCacheFileName function in file.go file
Remediation
References
Related Vulnerabilities
WordPress 3.9.x Arbitrary File Deletion Vulnerability (3.9 - 3.9.24)
WordPress Plugin Autoship Cloud PHP Object Injection (1.0.13)
WebLogic CVE-2022-21257 Vulnerability (CVE-2022-21257)
WordPress Plugin User Role Editor Cross-Site Request Forgery (3.12)
Artifactory Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-1000206)