CVE-2026-9098 CVE-2026-9098

In Casdoor versions 2.362.0 and earlier, the SAML callback handler in controllers/auth.go accepts any well-formed SAMLResponse sent to /api/acs without verifying that it corresponds to an AuthnRequest previously issued by Casdoor. Additionally, if an administrator disables or deletes an IdP...

CVE-2026-9098

In Casdoor versions 2.362.0 and earlier , a vulnerability exists in the SAML callback handler located in controllers/auth.go. The system accepts any well-formed SAMLResponse sent to the /api/acs endpoint without verifying that the response corresponds to a previously issued AuthnRequest. Furtherm...