返回列表

CVE-2022-24124: Casdoor 1.13.0 - Unauthenticated SQL Injection

PoC
2025-08-01

影响软件

Casdoor

关联产品

漏洞描述

Casdoor version 1.13.0 suffers from a remote unauthenticated SQL injection vulnerability via the query API in Casdoor before 1.13.1 related to the field and value parameters, as demonstrated by api/get-organizations.

PoC / 利用代码

登录后可查看 PoC 内容

查看原文