CVE-2023-34927
22.06.2023, 13:15
Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) in the endpoint /api/set-password. This vulnerability allows attackers to arbitrarily change the victim user's password via supplying a crafted URL.
| Vendor | Product | Version |
|---|---|---|
| casbin | casdoor | 𝑥 ≤ 1.331.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration