Em resumo
- CVE-2026-6815 é uma vulnerabilidade MÉDIO (CVSS 5.9) que afeta github.com/casdoor/casdoor, casdoor (casbin).
- Chance de exploração nos próximos 30 dias (EPSS): 0.51%, maior que 43.8% das vulnerabilidades.
- Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.
Description
An arbitrary file write vulnerability exists in Casdoor's Local File System storage provider. Due to insufficient path sanitization, an authenticated attacker with administrative privileges can perform a Path Traversal attack to create or overwrite arbitrary files anywhere on the host filesystem, bypassing the application's intended storage sandbox.
NVD description
An arbitrary file write vulnerability exists in Casdoor's Local File System storage provider. Due to insufficient path sanitization, an authenticated attacker with administrative privileges can perform a Path Traversal attack to create or overwrite arbitrary files anywhere on the host filesystem, bypassing the application's intended storage sandbox.
Mais vulnerabilidades de github.com/casdoor/casdoor
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free