casbin kayıtları
casbin üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %25
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-552 Files or Directories Accessible to External Parties1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
47Planlayın | CVE-2022-24124Kavram kanıtı | The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/gcasbin · casdoor · CWE-89 | Yüksek7,5 | — | %55,3 | 29 Oca 2022 |
36İzleyin | CVE-2022-38638İstismar yok | Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource.casbin · casdoor · CWE-22 | Kritik9,1 | — | %1,2 | 9 Eyl 2022 |
35İzleyin | CVE-2024-41657İstismar yok | GHSL-2024-035: Casdoor CORS misconfigurationcasbin · casdoor · CWE-942 | Yüksek8,8 | — | %0,8 | 20 Ağu 2024 |
32İzleyin | CVE-2022-44942İstismar yok | Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function.casbin · casdoor · CWE-22 | Yüksek8,1 | — | %0,9 | 6 Ara 2022 |
30İzleyin | CVE-2024-41264İstismar yok | An issue discovered in casdoor v1.636.0 allows attackers to obtain sensitive information via the ssh.InsecureIgnoreHostKey() method.casbin · casdoor · CWE-295 | Yüksek7,5 | — | %0,5 | 1 Ağu 2024 |
27İzleyin | CVE-2023-34927Kavram kanıtı | Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) in the endpoint /api/set-password.casbin · casdoor · CWE-352 | Orta6,5 | — | %3,1 | 22 Haz 2023 |
27İzleyin | CVE-2024-5587İstismar yok | Casdoor Configuration File app.conf file accessCWE-552 | Orta6,9 | — | %0,5 | 2 Haz 2024 |
24İzleyin | CVE-2024-41658İstismar yok | GHSL-2024-036: Reflected XSS in QrCodePage.jscasbin · casdoor · CWE-79 | Orta6,1 | — | %0,4 | 20 Ağu 2024 |
23İzleyin | CVE-2026-6815Kavram kanıtı | An arbitrary file write vulnerability exists in Casdoor's Local File System storage provider.casbin · casdoor · CWE-22 | Orta5,9 | — | %0,6 | 11 May 2026 |
20İzleyin | CVE-2026-5469İstismar yok | Casdoor Webhook URL server-side request forgerycasbin · casdoor · CWE-918 | Orta5,1 | — | %0,6 | 3 Nis 2026 |
8İzleyin | CVE-2026-5467İstismar yok | Casdoor OAuth Authorization Request redirectcasbin · casdoor · CWE-601 | Düşük2,1 | — | %0,4 | 3 Nis 2026 |
8İzleyin | CVE-2026-5468İstismar yok | Casdoor dangerouslySetInnerHTML cross site scriptingcasbin · casdoor · CWE-79 | Düşük2,0 | — | %0,3 | 3 Nis 2026 |
- CVE-2022-2412447Planlayın
The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/g
YüksekCVSS 7,5Kavram kanıtıEPSS %55casbin · casdoor29 Oca 2022
- CVE-2022-3863836İzleyin
Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource.
KritikCVSS 9,1İstismar yokEPSS %1casbin · casdoor9 Eyl 2022
- CVE-2024-4165735İzleyin
GHSL-2024-035: Casdoor CORS misconfiguration
YüksekCVSS 8,8İstismar yokEPSS %1casbin · casdoor20 Ağu 2024
- CVE-2022-4494232İzleyin
Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function.
YüksekCVSS 8,1İstismar yokEPSS %1casbin · casdoor6 Ara 2022
- CVE-2024-4126430İzleyin
An issue discovered in casdoor v1.636.0 allows attackers to obtain sensitive information via the ssh.InsecureIgnoreHostKey() method.
YüksekCVSS 7,5İstismar yokEPSS %0casbin · casdoor1 Ağu 2024
- CVE-2023-3492727İzleyin
Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) in the endpoint /api/set-password.
OrtaCVSS 6,5Kavram kanıtıEPSS %3casbin · casdoor22 Haz 2023
- CVE-2024-558727İzleyin
Casdoor Configuration File app.conf file access
OrtaCVSS 6,9İstismar yokEPSS %02 Haz 2024
- CVE-2024-4165824İzleyin
GHSL-2024-036: Reflected XSS in QrCodePage.js
OrtaCVSS 6,1İstismar yokEPSS %0casbin · casdoor20 Ağu 2024
- CVE-2026-681523İzleyin
An arbitrary file write vulnerability exists in Casdoor's Local File System storage provider.
OrtaCVSS 5,9Kavram kanıtıEPSS %1casbin · casdoor11 May 2026
- CVE-2026-546920İzleyin
Casdoor Webhook URL server-side request forgery
OrtaCVSS 5,1İstismar yokEPSS %1casbin · casdoor3 Nis 2026
- CVE-2026-54678İzleyin
Casdoor OAuth Authorization Request redirect
DüşükCVSS 2,1İstismar yokEPSS %0casbin · casdoor3 Nis 2026
- CVE-2026-54688İzleyin
Casdoor dangerouslySetInnerHTML cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %0casbin · casdoor3 Nis 2026