Casdoor vulnerabilities

Products

• Casdoor 23

Newest

• casdoor Casdoor Proxy Validation cas.go CasP3ProxyValidate server-side request forgery CVE-2026-108572 5.3 MediumOctober 11, 2026
• casdoor Casdoor API Endpoint authz_filter.go ApiFilter missing authentication CVE-2026-105307 6.9 MediumOctober 5, 2026
• casdoor Casdoor through 4.4.0 Cross-Organization User Administration via /api/mcp CVE-2026-91998 9.4 CriticalSeptember 15, 2026
• casdoor Casdoor through 4.4.0 Private Key Exposure via Certificate Endpoints CVE-2026-90942 9.3 CriticalSeptember 14, 2026
• casdoor Casdoor upload-resource API resource.go missing authentication CVE-2026-84423 6.9 MediumSeptember 1, 2026
• casdoor CVE-2026-15630 CVE-2026-15630 9.9 CriticalJuly 23, 2026
• casdoor CVE-2026-9098 CVE-2026-9098 9.1 CriticalMay 28, 2026
• casdoor CVE-2026-9097 CVE-2026-9097 9.8 CriticalMay 28, 2026
• casdoor CVE-2026-9096 CVE-2026-9096 7.5 HighMay 28, 2026
• casdoor CVE-2026-9095 CVE-2026-9095 8.1 HighMay 28, 2026
• casdoor CVE-2026-9094 CVE-2026-9094 Fix available 9.8 CriticalMay 28, 2026
• casdoor CVE-2026-9093 CVE-2026-9093 9.8 CriticalMay 28, 2026
• casdoor CVE-2026-9092 CVE-2026-9092 9.1 CriticalMay 28, 2026
• casdoor CVE-2026-9091 CVE-2026-9091 5.3 MediumMay 28, 2026
• casdoor CVE-2026-9090 CVE-2026-9090 Public exploit 9.1 CriticalMay 28, 2026
• casbin casdoor CVE-2026-6815 CVE-2026-6815 Public exploit 5.9 MediumMay 11, 2026
• casbin casdoor Casdoor Webhook URL server-side request forgery CVE-2026-5469 5.1 MediumApril 3, 2026
• casbin casdoor Casdoor dangerouslySetInnerHTML cross site scripting CVE-2026-5468 5.1 MediumApril 3, 2026
• casbin casdoor Casdoor OAuth Authorization Request redirect CVE-2026-5467 5.3 MediumApril 3, 2026
• casdoor Casdoor SCIM User Creation Endpoint scim.go HandleScim authorization CVE-2025-4210 Fix available 6.9 MediumMay 2, 2025
• casbin casdoor GHSL-2024-036: Reflected XSS in QrCodePage.js CVE-2024-41658 6.1 MediumAugust 20, 2024
• casbin casdoor GHSL-2024-035: Casdoor CORS misconfiguration CVE-2024-41657 8.1 HighAugust 20, 2024
• casbin casdoor Casdoor Configuration File app.conf file access CVE-2024-5587 6.9 MediumJune 2, 2024