Search for packages
| purl | pkg:pypi/casdoor@1.13.0 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2022-43190
Aliases: CVE-2022-38638 GHSA-9vm3-r8gq-cr6x GO-2022-1006 |
Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource. | There are no reported fixed by versions. |
|
PYSEC-2022-43189
Aliases: CVE-2022-24124 GHSA-m358-g4rp-533r GO-2022-0303 |
The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as … |
Vulnerable |