Vulnerabilities in casdoor
15 resultsCVE-2024-41657HIGHGHSL-2024-035: Casdoor CORS misconfigurationEPSS 0.8%CVE-2026-91998CRITICALCasdoor through 4.4.0 Cross-Organization User Administration via /api/mcpEPSS 0.6%CVE-2026-6815MEDIUMCVE-2026-6815EPSS 0.5%CVE-2026-15630CRITICALCVE-2026-15630EPSS 0.5%CVE-2024-41658MEDIUMGHSL-2024-036: Reflected XSS in QrCodePage.jsEPSS 0.4%CVE-2026-9094CRITICALCVE-2026-9094EPSS 0.4%CVE-2026-9097CRITICALCVE-2026-9097EPSS 0.4%CVE-2026-9093CRITICALCVE-2026-9093EPSS 0.4%CVE-2026-9096HIGHCVE-2026-9096EPSS 0.3%CVE-2026-9091MEDIUMCVE-2026-9091EPSS 0.3%CVE-2026-9092CRITICALCVE-2026-9092EPSS 0.3%CVE-2026-9095HIGHCVE-2026-9095EPSS 0.3%CVE-2026-90942CRITICALCasdoor through 4.4.0 Private Key Exposure via Certificate EndpointsEPSS 0.3%CVE-2026-9098CRITICALCVE-2026-9098EPSS 0.2%CVE-2026-9090CRITICALCVE-2026-9090EPSS 0.2%