VU#889462: Casdoor authentication server is vulnerable to authorization bypass

T1Covered by 1 source · first reported by CERT/CC at 03 Sept, 17:03 UTC

Overview Casdoor is an open-source Access Management (IAM) platform used to manage web applications. An authorization bypass vulnerability affects Casdoor versions up to v4.2.0. The vulnerability allows a non-global organization administrator to perform unauthorized administrative actions against…