CVE-2024-40464

An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go file

Score

CVSS 3.1 8.8 High

Status

Analyzed - cve@mitre.org

Published

2024-07-31

Last modified

2024-08-06

Weaknesses

CWE-295, CWE-599

Affected products

• Beego (Beego)

References

• https://gist.github.com/nyxfqq/b53b0148b9aa040de63f58a68fd11445