Description
Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/casdoor/casdoor | < 1.103.1 | 1.103.1 | GHSA-9vm3-r8gq-cr6x |
| PyPI | casdoor | <= 1.97.3 | — | PYSEC-2022-43190 |