cve/2022/CVE-2022-24124.md
2024-06-18 02:51:15 +02:00

2.2 KiB

CVE-2022-24124

Description

The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.

POC

Reference

Github