CyberRota Analysis
AI-GeneratedA vulnerability in the ApiFilter function of Casdoor's API Endpoint allows for remote exploitation that results in missing authentication, potentially enabling unauthorized access to sensitive resources. Organizations using affected versions of Casdoor (up to 3.161.1) should prioritize patching this issue to mitigate the risk of unauthorized access and data breaches, especially given the public availability of the exploit. Immediate action is recommended for those managing authentication and authorization systems within their applications.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was detected in Casdoor up to 3.161.1. Affected is the function ApiFilter of the file routers/authz_filter.go of the component API Endpoint. Performing a manipulation results in missing authentication. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.