Arbitrary file deletion

Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function...

CVE-2022-44942

Casdoor prior to v1.126.1 is affected by CVE-2022-44942 due to an arbitrary file deletion vulnerability in the uploadFile function. The underlying issue allows an attacker with network access and low privileges (no user interaction required) to delete files, with an overall impact on integrity an...