Browse CVEs

MEDIUM 5.9 CVE-2026-6815 An arbitrary file write vulnerability exists in Casdoor's Local File System storage provider. Due to insufficient path sanitization, an authenticated… Casdoor after 2.328.0 Fix from $1,6002026-05-11 HIGH 7.2 CVE-2026-5469 A weakness has been identified in Casdoor 2.356.0. This vulnerability affects unknown code of the component Webhook URL Handler. Executing a manipula… Casdoor Mitigation only Fix from $1,9502026-04-03 MEDIUM 5.4 CVE-2026-5468 A security flaw has been discovered in Casdoor 2.356.0. This affects the function dangerouslySetInnerHTML. Performing a manipulation of the argument … Casdoor Mitigation only Fix from $1,6002026-04-03 MEDIUM 6.1 CVE-2026-5467 A vulnerability was identified in Casdoor 2.356.0. Affected by this issue is some unknown functionality of the component OAuth Authorization Request … Casdoor Mitigation only Fix from $1,6002026-04-03 HIGH 8.8 CVE-2024-41657 Casdoor is a UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform. In Casdoor 1.577.0 and earlier, a logic vulnerability exi… Casdoor No fix yet Fix from $1,9502024-08-20 MEDIUM 6.1 CVE-2024-41658 Casdoor is a UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform. In Casdoor 1.577.0 and earlier, he purchase URL that is … Casdoor No fix yet Fix from $1,6002024-08-20 HIGH 7.5 CVE-2024-41264 An issue discovered in casdoor v1.636.0 allows attackers to obtain sensitive information via the ssh.InsecureIgnoreHostKey() method. Casdoor Mitigation only Fix from $1,9502024-08-01 MEDIUM 6.5 CVE-2023-34927 Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) in the endpoint /api/set-password. This vulnerability allows… Casdoor after 1.331.0 Fix from $1,6002023-06-22 HIGH 8.1 CVE-2022-44942 Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function. Casdoor 1.126.1+ Fix from $1,9502022-12-07 CRITICAL 9.1 CVE-2022-38638 Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource. Casdoor Patch available Fix from $2,3002022-09-09 HIGH 7.5 CVE-2022-24124EPSS 55% The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organi… Casdoor 1.13.1+ Fix from $1,9502022-01-29