Description

The File Session Manager in Beego 1.10.0 allows local users to read session files because of weak permissions for individual files.

Remediation

References

CVE-2019-16355

Related Vulnerabilities

WordPress Plugin I Recommend This SQL Injection (3.7.2)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-42627)

Drupal Core 8.x.x Remote Code Execution (8.0.0 - 8.7.14)

WordPress Plugin Conversador Cross-Site Scripting (2.61)

Internet Information Services Other Vulnerability (CVE-2003-0225)

Severity

Medium

Classification

CVE-2019-16355 CWE-276 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities