CVE-2022-24124

State: Published
Severity: Not scored
Published: Jan 29, 2022
Updated: Aug 3, 2024
Reserved: Jan 29, 2022

Description

The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://github.com/casdoor/casdoor/issues/439
https://github.com/casdoor/casdoor/pull/442
https://github.com/casdoor/casdoor/compare/v1.13.0...v1.13.1
http://packetstormsecurity.com/files/166163/Casdoor-1.13.0-SQL-Injection.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.