CVE-2022-38638

CRITICAL CVSS: 9.1 Published: 2022-09-09 Modified: 2026-06-17

Description

Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource.

Affected Platforms

Casbin Casdoor

Weakness Type

CWE-22

References