返回列表

CVE-2025-4210: Casdoor - Authorization Bypass

PoC
2026-01-16

影响软件

Casdoor

关联产品

漏洞描述

Casdoor up to 1.811.0 contains an authorization bypass caused by manipulation in HandleScim function in controllers/scim.go, letting remote attackers bypass authorization, exploit requires remote access.

PoC / 利用代码

登录后可查看 PoC 内容

查看原文