high8.1
CVE-2022-44942
Casdoor arbitrary file deletion vulnerability via uploadFile function
Impact
Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the `uploadFile` function.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/casdoor/casdoor | < 1.126.1 | 1.126.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Casbin | Casdoor | before 1.126.1 |