CVE-2022-31836

CRITICAL CVSS: 9.8 Published: 2022-07-05 Modified: 2026-06-17

Description

The leafInfo.match() function in Beego v2.0.3 and below uses path.join() to deal with wildcardvalues which can lead to cross directory risk.

Affected Platforms

Beego Beego

Weakness Type

CWE-22

References