Skip to main content

CVE-2024-40465

CVE Details

Visit the official vulnerability details page for CVE-2024-40465 to learn more.

Initial Publication

01/27/2025

Last Update

03/29/2025

Third Party Dependency

github.com/beego/beego/v2

NIST CVE Summary

An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the getCacheFileName function in file.go file

CVE Severity

8.8

Our Official Summary

This vulnerability is a false positive. Although this is reported by the scanning tools on some of the components, further checks indicate the symbol/function with the vulnerability while present is not being used.

Status

Ongoing

Affected Products & Versions

This CVE is non-impacting as the impacting symbol and/or function is not used in the product

Revision History

No revisions available.