~ / search / GHSA-f93f-55c2-8c89

GHSA-f93f-55c2-8c89

Casdoor arbitrary file deletion vulnerability via uploadFile function

Source: GitHub Advisory Database (reviewed) High CVE-2022-44942

Packages

EcosystemPackageAffectedFixed in
Go github.com/casdoor/casdoor < 1.126.1 1.126.1

Details

As written in the advisory (Markdown source, shown as plain text).

Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the `uploadFile` function.

References

External links from the advisory. They lead to third-party sites.