Casdoor vulnerabilities

2 known vulnerabilities in Casdoor from Casbin. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  casdoor: Incorrect Comparison

  CVE-2024-41657Aug 20, 2024Casdoor

  Casdoor is a UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform. In Casdoor 1.577.0 and earlier, a logic vulnerability exists in the beego filter CorsFilter that allows any website to make cross domain requests to Casdoor as the logg

• 7.5 High severity

  Casdoor: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-24124Jan 29, 2022CasbinEPSS 55.3%

  The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.