Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p8c7-hjc4-gwf8

Опубликовано: 03 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 4.7

Описание

A weakness has been identified in Casdoor 2.356.0. This vulnerability affects unknown code of the component Webhook URL Handler. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

A weakness has been identified in Casdoor 2.356.0. This vulnerability affects unknown code of the component Webhook URL Handler. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 9%
0.00031
Низкий

5.1 Medium

CVSS4

4.7 Medium

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 4.7
nvd
4 дня назад

A weakness has been identified in Casdoor 2.356.0. This vulnerability affects unknown code of the component Webhook URL Handler. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 9%
0.00031
Низкий

5.1 Medium

CVSS4

4.7 Medium

CVSS3

Дефекты

CWE-918