Lucene search

K
cvelistMitreCVELIST:CVE-2022-24124
HistoryJan 29, 2022 - 10:53 p.m.

CVE-2022-24124

2022-01-2922:53:01
mitre
www.cve.org
2
casdoor
sql injection
api security
cve-2022-24124

EPSS

0.146

Percentile

95.9%

The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.