Headline

CVE-2023-34927: Casdoor Vulnerability

Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) in the endpoint /api/set-password. This vulnerability allows attackers to arbitrarily change the victim user’s password via supplying a crafted URL.

1 year ago

CVE

Open in Source

#csrf #vulnerability

Instantly share code, notes, and snippets.

Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) in the endpoint `/api/set-password`. This vulnerability allows attackers to arbitrarily change the victim user's password via supplying a crafted URL.

1 year ago

ghsa

Open in Source

#csrf #vulnerability #git