CRITICAL9.1
GO-2022-1006
Casdoor arbitrary file write vulnerability in github.com/casdoor/casdoor
Quick fix
GO-2022-1006 — github.com/casdoor/casdoor: upgrade to the fixed version with the command below.
go get github.com/casdoor/casdoor@v1.103.1Details
Casdoor arbitrary file write vulnerability in github.com/casdoor/casdoor
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/casdoor/casdoor
Introduced in:
0Fixed in: 1.103.1Fix
go get github.com/casdoor/casdoor@v1.103.1References
- https://github.com/advisories/GHSA-9vm3-r8gq-cr6x[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2022-38638[ADVISORY]
- https://github.com/casdoor/casdoor/commit/411d76798d73446fff4a0244f0475f1ea8bf42dc[FIX]
- https://github.com/casdoor/casdoor/issues/1035[REPORT]
- https://github.com/casdoor/casdoor/issues/1063[REPORT]
- https://github.com/casdoor/casdoor/releases/tag/v1.103.1[WEB]