CVE-2025-61524

Go/github.com/casdoor/casdoor CVE-2025-61524: high 7.2, EPSS 0.66%

Casdoor is vulnerable to Improper Authorization

Action: Upgrade github.com/casdoor/casdoor to 2.63.0 or later.

go get github.com/casdoor/casdoor@v2.63.0

Affected

Fixed versions

Sources

• osv: GHSA-5m9m-j5p7-m7f9
• https://nvd.nist.gov/vuln/detail/CVE-2025-61524
• https://github.com/casdoor/casdoor/commit/d883db907bb6e0b95737ef8e8b57b7da9078cbdd
• https://gist.github.com/DevHjz/e75cea851d48e5f5478ac2a90757851a
• https://github.com/casdoor/casdoor
• https://github.com/casdoor/casdoor/releases/tag/v2.63.0
• http://casdoor.com

CVE-2025-61524 · published 2025-10-08T21:30:34Z · modified 2025-11-05T19:57:10.988637Z · JSON

Go/github.com/casdoor/casdoor CVE-2025-61524: unknown, EPSS 0.66%

Casdoor is vulnerable to Improper Authorization in github.com/casdoor/casdoor

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2025-4026
• https://github.com/advisories/GHSA-5m9m-j5p7-m7f9
• https://nvd.nist.gov/vuln/detail/CVE-2025-61524
• https://github.com/casdoor/casdoor/commit/d883db907bb6e0b95737ef8e8b57b7da9078cbdd
• http://casdoor.com
• https://gist.github.com/DevHjz/e75cea851d48e5f5478ac2a90757851a
• https://github.com/casdoor/casdoor/releases/tag/v2.63.0

CVE-2025-61524 · published 2025-10-30T15:02:33Z · modified 2025-11-05T19:57:10.988637Z · JSON