Lucene search
GoogleOSV:GHSA-M358-G4RP-533RHistoryFeb 01, 2022 - 12:49 a.m.
SQL Injection in Casdoor
2022-02-0100:49:39
Google
osv.dev
8
casdoor
sql injection
query api
vulnerability
EPSS
0.146
Percentile
95.9%
The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.
References
packetstormsecurity.com/files/166163/Casdoor-1.13.0-SQL-Injection.html
github.com/casdoor/casdoor
github.com/casdoor/casdoor/commit/5ec0c7a89005819960d8fe07f5ddda13d1371b8c
github.com/casdoor/casdoor/compare/v1.13.0...v1.13.1
github.com/casdoor/casdoor/issues/439
github.com/casdoor/casdoor/pull/442
nvd.nist.gov/vuln/detail/CVE-2022-24124
Related
nuclei
nuclei
Casdoor 1.13.0 - Unauthenticated SQL Injection
2022-02-28 13:53:30
nvd
nvd
CVE-2022-24124
2022-01-29 23:15:07
githubexploit
githubexploit
Exploit for SQL Injection in Casbin Casdoor
2022-02-25 07:55:55
Exploit for SQL Injection in Casbin Casdoor
2022-08-31 16:23:16
Exploit for SQL Injection in Casbin Casdoor
2022-06-04 21:01:22
packetstorm
packetstorm
Casdoor 1.13.0 SQL Injection
2022-02-28 00:00:00
veracode
veracode
SQL Injection
2022-01-31 04:14:01
osv
osv
SQL Injection in Casdoor in github.com/casdoor/casdoor
2024-08-21 14:30:26
CVE-2022-24124
2022-01-29 23:15:07
cvelist
cvelist
CVE-2022-24124
2022-01-29 22:53:01
cve
cve
CVE-2022-24124
2022-01-29 23:15:07
github
github
SQL Injection in Casdoor
2022-02-01 00:49:39
prion
prion
Sql injection
2022-01-29 23:15:00
qualysblog
qualysblog
Casdoor SQL Injection (CVE-2022-24124)
2022-03-09 10:31:26
zdt
zdt
Casdoor 1.13.0 - SQL Injection (Unauthenticated) Vulnerability
2022-02-28 00:00:00
exploitdb
exploitdb
Casdoor 1.13.0 - SQL Injection (Unauthenticated)
2022-02-28 00:00:00