CVE-2025-61524

Casdoor versions v2.26.0 and before (specifically the github.com/casdoor/casdoor/controllers component) are vulnerable to Improper Authorization (CWE-285 ). The root cause lies in the permission verification module and the organization/application editing interface , which allows remote authentic...