CVE-2019-16355
5 advisories.
Go/github.com/beego/beego CVE-2019-16354, CVE-2019-16355: medium 4.7
Beego has a file creation race condition
Action: Upgrade github.com/beego/beego to 1.12.2 or later.
go get github.com/beego/beego@v1.12.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.2 | - |
Fixed versions
| 1.12.2 |
Sources
- osv: GHSA-f6px-w8rh-7r89
- https://nvd.nist.gov/vuln/detail/CVE-2019-16354
- https://github.com/astaxie/beego/issues/3763
- https://github.com/beego/beego/issues/3763
- https://github.com/beego/beego/pull/3975
- https://github.com/beego/beego/pull/3975/commits/f99cbe0fa40936f2f8dd28e70620c559b6e5e2fd
- https://github.com/astaxie/beego/commit/f99cbe0fa40936f2f8dd28e70620c559b6e5e2fd
- https://github.com/beego/beego/commit/bac2b31afecc65d9a89f9e473b8006c5edc0c8d1
- https://github.com/astaxie/beego
- https://github.com/astaxie/beego/blob/v1.12.2/session/sess_file.go#L142
- https://pkg.go.dev/vuln/GO-2021-0084
CVE-2019-16354, CVE-2019-16355 · published · modified · JSON
Go/github.com/astaxie/beego CVE-2019-16354, CVE-2019-16355: medium 4.7
Beego has a file creation race condition
Action: Upgrade github.com/astaxie/beego to 1.12.2 or later.
go get github.com/astaxie/beego@v1.12.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.2 | - |
Fixed versions
| 1.12.2 |
Sources
- osv: GHSA-f6px-w8rh-7r89#Go/github.com/astaxie/beego
- https://nvd.nist.gov/vuln/detail/CVE-2019-16354
- https://github.com/astaxie/beego/issues/3763
- https://github.com/beego/beego/issues/3763
- https://github.com/beego/beego/pull/3975
- https://github.com/beego/beego/pull/3975/commits/f99cbe0fa40936f2f8dd28e70620c559b6e5e2fd
- https://github.com/astaxie/beego/commit/f99cbe0fa40936f2f8dd28e70620c559b6e5e2fd
- https://github.com/beego/beego/commit/bac2b31afecc65d9a89f9e473b8006c5edc0c8d1
- https://github.com/astaxie/beego
- https://github.com/astaxie/beego/blob/v1.12.2/session/sess_file.go#L142
- https://pkg.go.dev/vuln/GO-2021-0084
CVE-2019-16354, CVE-2019-16355 · published · modified · JSON
Go/github.com/beego/beego CVE-2019-16354, CVE-2019-16355: medium 5.5
Incorrect Default Permissions in Beego
Action: Upgrade github.com/beego/beego to 1.12.2 or later.
go get github.com/beego/beego@v1.12.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.2 | - |
Fixed versions
| 1.12.2 |
Sources
- osv: GHSA-hf4p-4j9r-3cvx
- https://nvd.nist.gov/vuln/detail/CVE-2019-16355
- https://github.com/beego/beego/issues/3763
- https://github.com/beego/beego/pull/3975
- https://github.com/beego/beego/pull/3975/commits/f99cbe0fa40936f2f8dd28e70620c559b6e5e2fd
- https://github.com/beego/beego/commit/bac2b31afecc65d9a89f9e473b8006c5edc0c8d1
CVE-2019-16354, CVE-2019-16355 · published · modified · JSON
Go/github.com/astaxie/beego CVE-2019-16354, CVE-2019-16355: medium 5.5
Incorrect Default Permissions in Beego
Action: Upgrade github.com/astaxie/beego to 1.12.2 or later.
go get github.com/astaxie/beego@v1.12.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.2 | - |
Fixed versions
| 1.12.2 |
Sources
- osv: GHSA-hf4p-4j9r-3cvx#Go/github.com/astaxie/beego
- https://nvd.nist.gov/vuln/detail/CVE-2019-16355
- https://github.com/beego/beego/issues/3763
- https://github.com/beego/beego/pull/3975
- https://github.com/beego/beego/pull/3975/commits/f99cbe0fa40936f2f8dd28e70620c559b6e5e2fd
- https://github.com/beego/beego/commit/bac2b31afecc65d9a89f9e473b8006c5edc0c8d1
CVE-2019-16354, CVE-2019-16355 · published · modified · JSON
Go/github.com/astaxie/beego CVE-2019-16354, CVE-2019-16355: unknown
Incorrect permissions for critical resource in github.com/astaxie/beego
Action: Upgrade github.com/astaxie/beego to 1.12.2 or later.
go get github.com/astaxie/beego@v1.12.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.2 | - |
Fixed versions
| 1.12.2 |
Sources
- osv: GO-2021-0084
- https://github.com/beego/beego/pull/3975
- https://github.com/beego/beego/commit/bac2b31afecc65d9a89f9e473b8006c5edc0c8d1
- https://github.com/beego/beego/issues/3763
CVE-2019-16354, CVE-2019-16355 · published · modified · JSON