TI-2024-27720 CVE-2024-41657 · GHSA-mchx-7j67-8mcf
GHSL-2024-035: Casdoor CORS misconfiguration
Priority HIGH 73
Casdoor is a UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform.
Casdoor
Records23All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
Casdoor records in CISA KEVNo Casdoor vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
11 records in Casdoor · all components
TI-2022-22096 CVE-2022-44942 · GHSA-f93f-55c2-8c89
Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function.
Priority HIGH 68
Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function.
TI-2022-08069 CVE-2022-24124 · GHSA-m358-g4rp-533r
The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the…
Priority HIGH 66
The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.
TI-2023-17434 CVE-2023-34927 · GHSA-rwcp-qrwg-56cg
Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF)…
Priority MEDIUM 62
Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) in the endpoint /api/set-password.
TI-2024-27721 CVE-2024-41658 · GHSA-gv2p-4mvg-g32h
GHSL-2024-036: Reflected XSS in QrCodePage.js
Priority MEDIUM 60
Casdoor is a UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform.
TI-2026-04788 CVE-2026-5467 · GHSA-mj24-pqx2-6788
Casdoor OAuth Authorization Request redirect
Priority MEDIUM 57
A vulnerability was identified in Casdoor 2.356.0.
TI-2022-18179 CVE-2022-38638 · GHSA-9vm3-r8gq-cr6x
Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the…
Priority MEDIUM 42
Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource.
TI-2024-27563 CVE-2024-41264 · GHSA-67fw-w8f2-88wp
An issue discovered in casdoor v1.636.0 allows attackers to obtain sensitive information…
Priority LOW 39
An issue discovered in casdoor v1.636.0 allows attackers to obtain sensitive information via the ssh.InsecureIgnoreHostKey() method.
TI-2026-05978 CVE-2026-6815 · GHSA-rmxx-v9rj-vpvg
Path traversal in Casdoor
Priority LOW 27
An arbitrary file write vulnerability exists in Casdoor's Local File System storage provider.
TI-2026-04790 CVE-2026-5469 · GHSA-p8c7-hjc4-gwf8
Casdoor Webhook URL server-side request forgery
Priority LOW 23
A weakness has been identified in Casdoor 2.356.0.
TI-2026-04789 CVE-2026-5468 · GHSA-w799-7525-rpr6
Casdoor dangerouslySetInnerHTML cross site scripting
Priority LOW 23
A security flaw has been discovered in Casdoor 2.356.0.