
Casdoor 1.901.0 – Cross-Site Request Forgery (CSRF)
# Exploit Title: Casdoor 1.901.0 – Cross-Site Request Forgery (CSRF) # Application: Casdoor # Version: 1.901.0 # Date: 03/07/2024 # Exploit Author: Van Lam Nguyen # Vendor Homepage: https://casdoor.org/ # Software Link: https://github.com/casdoor/casdoor/archive/refs/tags/v1.901.0.zip # Tested on: Windows # CVE : N/A Overview ================================================== Casdoor v1.901.0 and below was discovered to contain a Cross-Site…