PyPI/casdoor CVE-2022-38638: critical 9.1, EPSS 1.23%

Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource.

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: PYSEC-2022-43190
• https://github.com/casdoor/casdoor/issues/1035

CVE-2022-38638 · published 2022-09-09T20:15:11.340Z · modified 2026-10-04T17:00:02.247223556Z · JSON