What is GHSA-r6qh-j42j-pw64?

GHSA-r6qh-j42j-pw64 is a security advisory published by GitHub Security Advisories with High severity. Beego privilege escalation vulnerability

Which CVE IDs does GHSA-r6qh-j42j-pw64 cover?

GHSA-r6qh-j42j-pw64 covers the following CVE IDs: CVE-2024-40464. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-r6qh-j42j-pw64?

GHSA-r6qh-j42j-pw64 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

Which products are affected by GHSA-r6qh-j42j-pw64?

GHSA-r6qh-j42j-pw64 affects 1 product, including: go/github.com/beego/beego/v2:\u003c 2.2.1.

GHSA-r6qh-j42j-pw64HighCVSS 8.8

Beego privilege escalation vulnerability

Vendor

GitHub Security Advisories

Published

July 31, 2024

Last Modified

August 6, 2024

🔗 CVE IDs covered (1)

CVE-2024-40464 →

📋 Description

An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in the beego/core/logs/smtp.go file.

🎯 Affected products1

go/github.com/beego/beego/v2:< 2.2.1

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2024-40464
https://gist.github.com/nyxfqq/b53b0148b9aa040de63f58a68fd11445
https://github.com/beego/beego/security/advisories/GHSA-6g9p-wv47-4fxq
https://github.com/beego/beego/commit/8f89e12e6cafb106d5c201dbc3b2a338bfde74e2
https://github.com/advisories/GHSA-r6qh-j42j-pw64