PT-2025-18796 · Casdoor · Casdoor
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Casdoor versions up to 1.811.0
Description
A critical issue was found in the SCIM User Creation Endpoint, specifically affecting the
HandleScim function of the controllers/scim.go file. This issue leads to authorization bypass and can be initiated remotely.Recommendations
For versions up to 1.811.0, upgrade to version 1.812.0 to address this issue.
Exploit
Fix
DoS
Improper Authorization
IDOR
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Casdoor