← Database

CVE-2022-24124

HIGH CVSS: 7.5 Published: 2022-01-29 Modified: 2026-06-17

Description

The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.

Affected Platforms

Casbin Casdoor

Weakness Type

CWE-89

References