High · 8.1 CVE-2022-44942 EUVD-2022-7618GHSA-f93f-55c2-8c89GO-2022-1153

Casdoor arbitrary file deletion vulnerability via uploadFile function

Published Dec 7, 2022 · Updated Apr 23, 2025 · Assigned by mitre

Description

Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function.

Ecosystem	Package	Affected	Fixed	Record
Go	github.com/casdoor/casdoor	< 1.126.1	1.126.1	GHSA-f93f-55c2-8c89