← All advisories

Critical severityNVD Advisory· Published Sep 9, 2022· Updated Aug 3, 2024

CVE-2022-38638

CVE-2022-38638

Description

Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
github.com/casdoor/casdoorGo	< 1.103.1	1.103.1

Affected products

2

Casdoor/Casdoorcpe-rescue
ghsa-coords
pkg:golang/github.com/casdoor/casdoor
Range: < 1.103.1

Patches

Vulnerability mechanics

References

6

github.com/advisories/GHSA-9vm3-r8gq-cr6xghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-38638ghsaADVISORY
github.com/casdoor/casdoor/commit/411d76798d73446fff4a0244f0475f1ea8bf42dcghsaWEB
github.com/casdoor/casdoor/issues/1035ghsax_refsource_MISCWEB
github.com/casdoor/casdoor/issues/1063ghsaWEB
github.com/casdoor/casdoor/releases/tag/v1.103.1ghsaWEB

News mentions

0

No linked articles in our index yet.