What is GHSA-p8c7-hjc4-gwf8?

GHSA-p8c7-hjc4-gwf8 is a security advisory published by GitHub Security Advisories with Medium severity. Casdoor vulnerable to SSRF via crafted Webhook URL

Which CVE IDs does GHSA-p8c7-hjc4-gwf8 cover?

GHSA-p8c7-hjc4-gwf8 covers the following CVE IDs: CVE-2026-5469. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-p8c7-hjc4-gwf8?

GHSA-p8c7-hjc4-gwf8 has a CVSS v3 base score of 4.7, published by GitHub Security Advisories.

Which products are affected by GHSA-p8c7-hjc4-gwf8?

GHSA-p8c7-hjc4-gwf8 affects 1 product, including: go/github.com/casdoor/casdoor:\u003c= 1.1000.0.

GHSA-p8c7-hjc4-gwf8MediumCVSS 4.7

Casdoor vulnerable to SSRF via crafted Webhook URL

Vendor

GitHub Security Advisories

Published

April 3, 2026

Last Modified

April 10, 2026

🔗 CVE IDs covered (1)

CVE-2026-5469 →

📋 Description

A weakness has been identified in Casdoor 2.356.0. This vulnerability affects unknown code of the component Webhook URL Handler. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

🎯 Affected products1

go/github.com/casdoor/casdoor:<= 1.1000.0

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-5469
https://vuldb.com/submit/781771
https://vuldb.com/vuln/355073
https://vuldb.com/vuln/355073/cti
https://github.com/advisories/GHSA-p8c7-hjc4-gwf8