GO-2024-3016

See a problem?
Please try reporting it to the source first.

Source

https://pkg.go.dev/vuln/GO-2024-3016

Import Source

https://vuln.go.dev/ID/GO-2024-3016.json

JSON Data

https://api.osv.dev/v1/vulns/GO-2024-3016

Aliases

Published

2024-08-19T17:26:34Z

Modified

2024-08-19T17:58:32.040774Z

Summary

Beego privilege escalation vulnerability via sendMail in github.com/beego/beego/v2

Details

Beego privilege escalation vulnerability via sendMail in github.com/beego/beego/v2

Database specific

{
    "url": "https://pkg.go.dev/vuln/GO-2024-3016",
    "review_status": "REVIEWED"
}

References

Affected packages

Go / github.com/beego/beego/v2

Package

Name: github.com/beego/beego/v2; View open source insights on deps.dev
Purl: pkg:golang/github.com/beego/beego/v2

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.2.1

Ecosystem specific

{
    "imports": [
        {
            "symbols": [
                "AccessLog",
                "Alert",
                "Async",
                "BeeLogger.Alert",
                "BeeLogger.Async",
                "BeeLogger.Close",
                "BeeLogger.Critical",
                "BeeLogger.Debug",
                "BeeLogger.DelLogger",
                "BeeLogger.Emergency",
                "BeeLogger.Error",
                "BeeLogger.Flush",
                "BeeLogger.Info",
                "BeeLogger.Informational",
                "BeeLogger.Notice",
                "BeeLogger.Reset",
                "BeeLogger.SetLogger",
                "BeeLogger.Trace",
                "BeeLogger.Warn",
                "BeeLogger.Warning",
                "BeeLogger.Write",
                "ColorByMethod",
                "ColorByStatus",
                "Critical",
                "Debug",
                "Emergency",
                "Error",
                "GetLogger",
                "Info",
                "Informational",
                "JLWriter.Format",
                "JLWriter.Init",
                "JLWriter.WriteMsg",
                "LogMsg.OldStyleFormat",
                "NewLogger",
                "Notice",
                "PatternLogFormatter.Format",
                "PatternLogFormatter.ToString",
                "Reset",
                "SLACKWriter.Format",
                "SLACKWriter.Init",
                "SLACKWriter.WriteMsg",
                "SMTPWriter.Format",
                "SMTPWriter.Init",
                "SMTPWriter.WriteMsg",
                "SMTPWriter.sendMail",
                "SetLogger",
                "Trace",
                "Warn",
                "Warning",
                "connWriter.Format",
                "connWriter.Init",
                "connWriter.WriteMsg",
                "consoleWriter.Format",
                "consoleWriter.Init",
                "consoleWriter.WriteMsg",
                "fileLogWriter.Format",
                "fileLogWriter.Init",
                "fileLogWriter.WriteMsg",
                "multiFileLogWriter.Format",
                "multiFileLogWriter.Init",
                "multiFileLogWriter.WriteMsg",
                "newSMTPWriter"
            ],
            "path": "github.com/beego/beego/v2/core/logs"
        }
    ]
}