CVE-2022-24124: Casdoor 1.13.0 - Unauthenticated SQL Injection
PoC2025-08-01
影响软件
Casdoor
关联产品
漏洞描述
Casdoor version 1.13.0 suffers from a remote unauthenticated SQL injection vulnerability via the query API in Casdoor before 1.13.1 related to the field and value parameters, as demonstrated by api/get-organizations.
PoC / 利用代码
登录后可查看 PoC 内容