Vulnerabilities > Casbin > Casdoor > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-08-20 CVE-2024-41658 Cross-site Scripting vulnerability in Casbin Casdoor
Casdoor is a UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform.
network
low complexity
casbin CWE-79
6.1
6.1
2023-06-22 CVE-2023-34927 Cross-Site Request Forgery (CSRF) vulnerability in Casbin Casdoor
Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) in the endpoint /api/set-password.
network
low complexity
casbin CWE-352
6.5
6.5