PYSEC-2022-43190
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/casdoor/PYSEC-2022-43190.yaml
- JSON Data
- https://api.test.osv.dev/v1/vulns/PYSEC-2022-43190
- Aliases
- Published
- 2022-09-09T20:15:11Z
- Modified
- 2026-10-04T17:00:02Z
- Severity
-
- 9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource.
- References
Affected packages
PyPI / casdoor
Package
- Name
- casdoor
- View open source insights on deps.dev
- Purl
- pkg:pypi/casdoor
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedLast Affected1.97.3
Affected versions
1.*
1.0.0
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.2.0
1.2.1
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.7.0
1.8.0
1.9.0
1.10.0
1.11.0
1.12.0
1.12.1
1.13.0
1.13.1
1.14.0
1.14.1
1.14.2
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.19.0
1.20.0
1.21.0
1.22.0
1.23.0
1.24.0
1.25.0
1.26.0
1.27.0
1.28.0
1.29.0
1.30.0
1.31.0
1.32.0
1.33.0
1.34.0
1.35.0
1.36.0
1.37.0
1.38.0
1.39.0
1.40.0
1.41.0
1.42.0
1.43.0
1.43.1
1.43.2
1.43.3