[github.com/beego/beego/v2] Privilege escalation in beego

beego is an open-source, high-performance web framework for the Go programming language. An issue was discovered in file profile.go in function GetCPUProfile in beego through 2.0.2, allows attackers to launch symlink attacks locally.

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-27117
• https://github.com/beego/beego/issues/4484
• https://github.com/advisories/GHSA-2v6v-q994-xvxx