{"id":"CVE-2021-30080","published":"2022-04-05T15:37:04Z","modified":"2024-08-03T22:24:59Z","title":"An issue was discovered in the route lookup process in beego before 1.12.11 that allows attackers to bypass access…","vendor":null,"product":null,"tier":"tail","description":{"text":"An issue was discovered in the route lookup process in beego before 1.12.11 that allows attackers to bypass access control.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.01259,"percentile":0.69595,"provenance":"source"},"cwes":[],"references":[{"url":"https://github.com/beego/beego/commit/d5df5e470d0a8ed291930ae802fd7e6b95226519","tags":[]},{"url":"https://github.com/beego/beego/releases/tag/v1.12.11","tags":[]}],"priority":{"score":13.9,"factors":[{"name":"EPSS percentile","points":13.92}]},"affected":[{"ecosystem":"Go","package":"github.com/beego/beego/v2","vulnerableRanges":[">=2.0.0, <2.0.3"],"patched":["2.0.3"],"from":["GHSA-28r6-jm5h-mrgg","GO-2022-0572"],"provenance":"source"},{"ecosystem":"Go","package":"github.com/beego/beego","vulnerableRanges":["<=1.12.11","all versions"],"patched":[],"from":["GHSA-28r6-jm5h-mrgg","GO-2022-0572"],"provenance":"source"},{"ecosystem":"Go","package":"github.com/astaxie/beego","vulnerableRanges":["all versions"],"patched":[],"from":["GO-2022-0572"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-1592","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2021-27116","published":"2022-04-05","fixed":"2.0.2","kev":false,"link":{"from":"CVE-2021-27116","to":"CVE-2021-30080","relation":"successor","confidence":"low","kind":"sequence","orderedBy":"description","evidence":[{"kind":"version-step","provenance":"source","package":"Go:github.com/beego/beego/v2","fromFixed":"2.0.2","toFixed":"2.0.3","daysApart":0}]}},{"cve":"CVE-2021-27117","published":"2022-04-05","fixed":"2.0.2","kev":false},{"cve":"CVE-2021-39391","published":"2021-09-14","fixed":"2.0.2","kev":false},{"cve":"CVE-2021-30080","published":"2022-04-05","fixed":"2.0.3","kev":false},{"cve":"CVE-2022-31259","published":"2022-05-21","fixed":"2.0.3","kev":false},{"cve":"CVE-2022-31836","published":"2022-07-05","fixed":"2.0.4","kev":false},{"cve":"CVE-2024-40464","published":"2024-07-31","fixed":"2.2.1","kev":false}],"package":"Go:github.com/beego/beego/v2"}}