TI-2026-05978 CVE-2026-6815 · GHSA-rmxx-v9rj-vpvg
Path traversal in Casdoor
Priority LOW 27
An arbitrary file write vulnerability exists in Casdoor's Local File System storage provider.
Vulnerabilities
11 records
TI-2026-04790 CVE-2026-5469 · GHSA-p8c7-hjc4-gwf8
Casdoor Webhook URL server-side request forgery
Priority LOW 23
A weakness has been identified in Casdoor 2.356.0.
TI-2026-04789 CVE-2026-5468 · GHSA-w799-7525-rpr6
Casdoor dangerouslySetInnerHTML cross site scripting
Priority LOW 23
A security flaw has been discovered in Casdoor 2.356.0.
TI-2026-04788 CVE-2026-5467 · GHSA-mj24-pqx2-6788
Casdoor OAuth Authorization Request redirect
Priority MEDIUM 57
A vulnerability was identified in Casdoor 2.356.0.
TI-2024-27721 CVE-2024-41658 · GHSA-gv2p-4mvg-g32h
GHSL-2024-036: Reflected XSS in QrCodePage.js
Priority MEDIUM 60
Casdoor is a UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform.
TI-2024-27720 CVE-2024-41657 · GHSA-mchx-7j67-8mcf
GHSL-2024-035: Casdoor CORS misconfiguration
Priority HIGH 73
Casdoor is a UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform.
TI-2024-27563 CVE-2024-41264 · GHSA-67fw-w8f2-88wp
An issue discovered in casdoor v1.636.0 allows attackers to obtain sensitive information…
Priority LOW 39
An issue discovered in casdoor v1.636.0 allows attackers to obtain sensitive information via the ssh.InsecureIgnoreHostKey() method.
TI-2023-17434 CVE-2023-34927 · GHSA-rwcp-qrwg-56cg
Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF)…
Priority MEDIUM 62
Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) in the endpoint /api/set-password.
TI-2022-22096 CVE-2022-44942 · GHSA-f93f-55c2-8c89
Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function.
Priority HIGH 68
Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function.
TI-2022-18179 CVE-2022-38638 · GHSA-9vm3-r8gq-cr6x
Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the…
Priority MEDIUM 42
Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource.
TI-2022-08069 CVE-2022-24124 · GHSA-m358-g4rp-533r
The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the…
Priority HIGH 66
The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.