Skip to content
OpenAdvisories

Package · PyPI

casdoor

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.1
    CVE-2022-38638

    Casdoor arbitrary file write vulnerability

    Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource.

    github.com/casdoor/casdoor casdoor PyPI Go
  • High 7.5
    CVE-2022-24124 Public exploit Scanner template EPSS 55%

    SQL Injection in Casdoor

    The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.

    github.com/casdoor/casdoor casdoor PyPI Go