CVE-2024-41657

HIGH EPSS 50.3%
Published Aug 20, 20241y ago · Modified Jun 17, 20261w ago
8.8 CVSS 3.1
High
Find Similar
Published Aug 20, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

Casdoor is a UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform. In Casdoor 1.577.0 and earlier, a logic vulnerability exists in the beego filter CorsFilter that allows any website to make cross domain requests to Casdoor as the logged in user. Due to the a logic error in checking only for a prefix when authenticating the Origin header, any domain can create a valid subdomain with a valid subdomain prefix (Ex: localhost.example.com), allowing the website to make requests to Casdoor as the current signed-in user.

CVSS Details

Base Score
8.8
Exploitability
2.8
Impact
5.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
50.3% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 2

CWE-697
CWE-942

Affected Products 1

VendorProductVersionRange
casbincasdoor*any

References 2

  • github.com https://github.com/casdoor/casdoor/blob/v1.577.0/routers/cors_filter.go#L45
    Product
  • securitylab.github.com https://securitylab.github.com/advisories/GHSL-2024-035_GHSL-2024-036_casdoor/
    ExploitThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.