Search for packages
| purl | pkg:pypi/casdoor@1.25.0 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2022-43190
Aliases: CVE-2022-38638 GHSA-9vm3-r8gq-cr6x GO-2022-1006 |
Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource. | There are no reported fixed by versions. |