Skip to content
OpenAdvisories

Package · Go

github.com/IceWhaleTech/CasaOS

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.8
    CVE-2023-37469

    CasaOS Command Injection vulnerability

    CasaOS is an open-source personal cloud system. Prior to version 0.4.4, if an authenticated user using CasaOS is able to successfully connect to a controlled SMB server, they are able to execute arbitrary commands. Version 0.4.4 contains a patch for the issue.

    IceWhaleTech CasaOS github.com/IceWhaleTech/CasaOS Go
  • Critical 9.8
    CVE-2023-37266

    Weak json web token (JWT) secrets in CasaOS

    CasaOS is an open-source Personal Cloud system. Unauthenticated attackers can craft arbitrary JWTs and access features that usually require authentication and execute arbitrary commands as `root` on CasaOS instances. This problem was addressed by improving th…

    IceWhaleTech CasaOS github.com/IceWhaleTech/CasaOS Go
  • Critical 9.8
    CVE-2022-24193

    Command Injection in CasaOS

    CasaOS before v0.2.7 was discovered to contain a command injection vulnerability.

    github.com/IceWhaleTech/CasaOS Go