Skip to content
OpenAdvisories

Package · Go

github.com/IceWhaleTech/CasaOS

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-37266 Scanner template

    Weak json web token (JWT) secrets in CasaOS

    CasaOS is an open-source Personal Cloud system. Unauthenticated attackers can craft arbitrary JWTs and access features that usually require authentication and execute arbitrary commands as `root` on CasaOS instances. This problem was addressed by improving th…

    IceWhaleTech CasaOS github.com/IceWhaleTech/CasaOS Go
  • Critical 9.8
    CVE-2022-24193

    Command Injection in CasaOS

    CasaOS before v0.2.7 was discovered to contain a command injection vulnerability.

    github.com/IceWhaleTech/CasaOS Go