What is GHSA-f93f-55c2-8c89?

GHSA-f93f-55c2-8c89 is a security advisory published by GitHub Security Advisories with High severity. Casdoor arbitrary file deletion vulnerability via uploadFile function

Which CVE IDs does GHSA-f93f-55c2-8c89 cover?

GHSA-f93f-55c2-8c89 covers the following CVE IDs: CVE-2022-44942. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-f93f-55c2-8c89?

GHSA-f93f-55c2-8c89 has a CVSS v3 base score of 8.1, published by GitHub Security Advisories.

Which products are affected by GHSA-f93f-55c2-8c89?

GHSA-f93f-55c2-8c89 affects 1 product, including: go/github.com/casdoor/casdoor:\u003c 1.126.1.

GHSA-f93f-55c2-8c89HighCVSS 8.1

Casdoor arbitrary file deletion vulnerability via uploadFile function

Vendor

GitHub Security Advisories

Published

December 7, 2022

Last Modified

February 2, 2023

🔗 CVE IDs covered (1)

CVE-2022-44942 →

📋 Description

Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function.

🎯 Affected products1

go/github.com/casdoor/casdoor:< 1.126.1

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2022-44942
https://github.com/casdoor/casdoor/issues/1171
https://github.com/casdoor/casdoor/pull/1174
https://github.com/casdoor/casdoor/releases/tag/v1.126.1
https://github.com/advisories/GHSA-f93f-55c2-8c89