Skip to main content

Beego CVE-2024-40465

HIGH
Use of a Broken or Risky Cryptographic Algorithm (CWE-327)
2024-07-31 cve@mitre.org
Privilege Escalation Beego
8.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
8.8 HIGH
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Jul 31, 2024 - 21:15 nvd
HIGH 8.8

DescriptionNVD

An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the getCacheFileName function in file.go file

AnalysisAI

An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the getCacheFileName function in file.go file. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-327. An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the getCacheFileName function in file.go file Affected products include: Beego.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Beego

View all
CVE-2022-31836 CRITICAL POC
9.8 Jul 05

The leafInfo.match() function in Beego v2.0.3 and below uses path.join() to deal with wildcardvalues which can lead to c
CVE-2022-31259 CRITICAL POC
9.8 May 21

The route lookup process in beego before 1.12.9 and 2.x before 2.0.3 allows attackers to bypass access control. Rated cr
CVE-2025-30223 CRITICAL POC
9.3 Mar 31

Beego is an open-source web framework for the Go programming language. Rated critical severity (CVSS 9.3), this vulnerab
CVE-2021-39391 MEDIUM POC
6.1 Sep 14

Cross Site Scripting (XSS) vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request,

CVE-2019-16355 MEDIUM POC
5.5 Sep 16

The File Session Manager in Beego 1.10.0 allows local users to read session files because of weak permissions for indivi
CVE-2024-40464 HIGH
8.8 Jul 31

An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located i
CVE-2024-55885 MEDIUM
6.9 Dec 12

beego is an open-source web framework for the Go programming language. Rated medium severity (CVSS 6.9), this vulnerabil
CVE-2019-16354 MEDIUM
4.7 Sep 16

The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition invo

Same weakness CWE-327 – Use of a Broken or Risky Cryptographic Algorithm

View all
CVE-2022-3365 CRITICAL POC
9.8
CVE-2014-8687 CRITICAL POC
9.8
CVE-2017-17382 MEDIUM POC
5.9
CVE-2016-6602 CRITICAL POC
9.8
CVE-2023-34039 CRITICAL POC
9.8
CVE-2025-2539 HIGH POC
7.5
CVE-2017-9466 CRITICAL POC
9.8
CVE-2023-5347 CRITICAL POC
9.8

Same technique Privilege Escalation

View all
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2017-5689 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0

Share

CVE-2024-40465 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy