Skip to content
OpenAdvisories

Package · Go

github.com/casdoor/casdoor

20 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-9090 Public exploit

    CVE-2026-9090

    Casdoor versions 2.362.0 and earlier contain a vulnerability that allows an attacker to bypass authentication by supplying an arbitrary signing certificate. The buildSpCertificateStore function extracts the X.509 certificate directly from the incoming SAMLRes…

    Casdoor Casdoor github.com/casdoor/casdoor Go
  • Medium 5.9
    CVE-2026-6815 Public exploit

    CVE-2026-6815

    An arbitrary file write vulnerability exists in Casdoor's Local File System storage provider. Due to insufficient path sanitization, an authenticated attacker with administrative privileges can perform a Path Traversal attack to create or overwrite arbitrary …

    Casdoor Casdoor github.com/casdoor/casdoor Go
  • Medium 6.5
    CVE-2023-34927 Public exploit

    Casdoor Cross-Site Request Forgery vulnerability

    Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) in the endpoint /api/set-password. This vulnerability allows attackers to arbitrarily change the victim user's password via supplying a crafted URL.

    github.com/casdoor/casdoor Go
  • High 7.5
    CVE-2022-24124 Public exploit EPSS 55%

    SQL Injection in Casdoor

    The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.

    github.com/casdoor/casdoor casdoor PyPI Go