CVE-2025-61524

CVE-2025-61524 affects Casdoor before 2.63.0, where a flaw in the permission verification module and the organization/application editing interface allows remote authenticated administrators of any organization to bypass permission checks by directly concatenating URLs after login. Technical deta...