CVE-2024-41264

Name of the Vulnerable Software and Affected Versions casdoor version 1.636.0

Description An issue in casdoor allows attackers to obtain sensitive information via the ssh.InsecureIgnoreHostKey() method, which disables host key verification. This method is used in github.com/casdoor/casdoor.

Recommendations For casdoor version 1.636.0, consider disabling the use of the ssh.InsecureIgnoreHostKey() method to prevent host key verification bypass until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.