GHSA-c77f-4rgj-jfr4

Source

https://github.com/advisories/GHSA-c77f-4rgj-jfr4

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/09/GHSA-c77f-4rgj-jfr4/GHSA-c77f-4rgj-jfr4.json

JSON Data

https://api.test.osv.dev/v1/vulns/GHSA-c77f-4rgj-jfr4

Aliases

CVE-2021-39391

Published

2021-09-15T20:23:28Z

Modified

2023-12-07T23:44:35Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

Cross-site Scripting in Beego

Details

Cross Site Scripting (XSS) vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated by administrators viewing the "Request Statistics" page.

Database specific

{
    "cwe_ids": [
        "CWE-64",
        "CWE-79"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2021-09-15T18:12:59Z",
    "nvd_published_at": "2021-09-14T18:15:00Z",
    "severity": "MODERATE"
}

References

Affected packages

Go / github.com/beego/beego/v2

Package

Name: github.com/beego/beego/v2; View open source insights on deps.dev
Purl: pkg:golang/github.com/beego/beego/v2

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.2

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/09/GHSA-c77f-4rgj-jfr4/GHSA-c77f-4rgj-jfr4.json"