CRITICAL9.1
PYSEC-2022-43190
Details
Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/casdoor
Introduced in:
0No fixed version published yet for casdoor (pip). Pin to a known-safe version or switch to an alternative.