GHSA-c77f-4rgj-jfr4

ghsaUSosv

Cross-site Scripting in Beego

view advisory published 2021-09-15Licence: CC-BY-4.0

Cross Site Scripting (XSS) vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated by administrators viewing the "Request Statistics" page.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-39391US	medium6.1	0.80% (56th)	—	2021-09-14
Cross Site Scripting (XSS) vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated by administrators viewing the "Request St…

references

External citations — patches, advisories, analysis.

https://github.com/beego/beegoPACKAGE
https://github.com/beego/beego/issues/4727WEB
https://nvd.nist.gov/vuln/detail/CVE-2021-39391ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan