Casbin vulnerabilities
We track 2 vulnerabilities in Casbin products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 20, 2024.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Casbin vulnerabilities
- 8.8 High severity
casdoor: Incorrect Comparison
Casdoor is a UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform. In Casdoor 1.577.0 and earlier, a logic vulnerability exists in the beego filter CorsFilter that allows any website to make cross domain requests to Casdoor as the logg
- 7.5 High severity
Casdoor: Improper Neutralization of Special Elements used in an SQL Command
The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.