[github.com/beego/beego/v2] Privilege escalation in beego

An issue was discovered in file profile.go. The MemProf and GetCPUProfile functions do not correctly check whether the created file exists. As a result attackers can launch attacks symlink attacks locally. Attackers can use this vulnerability to escalate privileges.

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-27116
• https://github.com/beego/beego/issues/4484
• https://github.com/advisories/GHSA-ffjp-66mx-3qpj