Casbin Casdoor vulnerabilities

• casbin casdoor CVE-2026-6815 CVE-2026-6815 Public exploit 5.9 MediumMay 11, 2026
• casbin casdoor Casdoor Webhook URL server-side request forgery CVE-2026-5469 5.1 MediumApril 3, 2026
• casbin casdoor Casdoor dangerouslySetInnerHTML cross site scripting CVE-2026-5468 5.1 MediumApril 3, 2026
• casbin casdoor Casdoor OAuth Authorization Request redirect CVE-2026-5467 5.3 MediumApril 3, 2026
• casbin casdoor GHSL-2024-036: Reflected XSS in QrCodePage.js CVE-2024-41658 6.1 MediumAugust 20, 2024
• casbin casdoor GHSL-2024-035: Casdoor CORS misconfiguration CVE-2024-41657 8.1 HighAugust 20, 2024
• casbin casdoor casdoor's use of`ssh.InsecureIgnoreHostKey()` disables host key verification CVE-2024-41264 7.5 HighAugust 1, 2024
• casbin casdoor Casdoor Configuration File app.conf file access CVE-2024-5587 6.9 MediumJune 2, 2024
• casbin casdoor Casdoor Cross-Site Request Forgery vulnerability CVE-2023-34927 Public exploit 6.5 MediumJune 22, 2023
• casbin casdoor Casdoor arbitrary file deletion vulnerability via uploadFile function CVE-2022-44942 Fix available 8.1 HighDecember 7, 2022
• casbin casdoor Casdoor arbitrary file write vulnerability CVE-2022-38638 Fix available 9.1 CriticalSeptember 9, 2022
• casbin casdoor SQL Injection in Casdoor CVE-2022-24124 Public exploitFix available EPSS 55.3% 7.5 HighJanuary 29, 2022