Lucene search

K
osvGoogleOSV:CVE-2022-24124
HistoryJan 29, 2022 - 11:15 p.m.

CVE-2022-24124

2022-01-2923:15:07
Google
osv.dev
7
casdoor
query api
sql injection
vulnerability
software

EPSS

0.146

Percentile

95.9%

The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.