| id: GO-2024-3331 |
| modules: |
| - module: github.com/beego/beego |
| vulnerable_at: 1.12.14 |
| - module: github.com/beego/beego/v2 |
| versions: |
| - fixed: 2.3.4 |
| vulnerable_at: 2.3.3 |
| packages: |
| - package: github.com/beego/beego/v2/client/cache |
| symbols: |
| - FileCache.getCacheFileName |
| derived_symbols: |
| - FileCache.Decr |
| - FileCache.Delete |
| - FileCache.Get |
| - FileCache.GetMulti |
| - FileCache.Incr |
| - FileCache.IsExist |
| - FileCache.Put |
| summary: |- |
| Beego has Collision Hazards of MD5 in Cache Key Filenames in |
| github.com/beego/beego |
| cves: |
| - CVE-2024-55885 |
| ghsas: |
| - GHSA-9j3m-fr7q-jxfw |
| references: |
| - advisory: https://github.com/beego/beego/security/advisories/GHSA-9j3m-fr7q-jxfw |
| - fix: https://github.com/beego/beego/commit/e7fa4835f71f47ab1d13afd638cebf661800d5a4 |
| source: |
| id: GHSA-9j3m-fr7q-jxfw |
| created: 2024-12-13T10:08:52.048773-05:00 |
| review_status: REVIEWED |
