PYSEC-2022-43189

See a problem?

Import Source

https://github.com/pypa/advisory-database/blob/main/vulns/casdoor/PYSEC-2022-43189.yaml

JSON Data

https://api.osv.dev/v1/vulns/PYSEC-2022-43189

Aliases

Published

2022-01-29T23:15:07Z

Modified

2026-10-04T11:40:45Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.

References

Affected packages

PyPI / casdoor

Package

Name: casdoor; View open source insights on deps.dev
Purl: pkg:pypi/casdoor

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.13.1

Affected versions

1.*

1.0.0

1.1.0

1.1.1

1.1.2

1.1.3

1.1.4

1.1.5

1.2.0

1.2.1

1.3.0

1.4.0

1.5.0

1.5.1

1.6.0

1.7.0

1.8.0

1.9.0

1.10.0

1.11.0

1.12.0

1.12.1

1.13.0

Database specific

source

"https://github.com/pypa/advisory-database/blob/main/vulns/casdoor/PYSEC-2022-43189.yaml"