Lucene search

GoogleOSV:GO-2022-0303

HistoryAug 21, 2024 - 2:30 p.m.

SQL Injection in Casdoor in github.com/casdoor/casdoor

2024-08-2114:30:26

Google

osv.dev

casdoor

sql injection

github

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

8.5

Confidence

Low

EPSS

0.146

Percentile

95.9%

JSON

SQL Injection in Casdoor in github.com/casdoor/casdoor

References

packetstormsecurity.com/files/166163/Casdoor-1.13.0-SQL-Injection.html

github.com/advisories/GHSA-m358-g4rp-533r

github.com/casdoor/casdoor/commit/5ec0c7a89005819960d8fe07f5ddda13d1371b8c

github.com/casdoor/casdoor/compare/v1.13.0...v1.13.1

github.com/casdoor/casdoor/issues/439

github.com/casdoor/casdoor/pull/442

nvd.nist.gov/vuln/detail/CVE-2022-24124

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

8.5

Confidence

Low

EPSS

0.146

Percentile

95.9%

JSON

Related for OSV:GO-2022-0303