CVE-2023-34927

Casdoor contains a Cross‑Site Request Forgery (CSRF) vulnerability in the /api/set-password endpoint for v1.331.0 and earlier, allowing an attacker to change a victim’s password via a crafted URL. Multiple public PoCs and exploit references exist (e.g., ExploitDB, PacketStorm), and later PacketsS...