CyberRota Analysis
AI-GeneratedCasdoor versions up to 4.4.0 are vulnerable due to improper masking of the instance-wide built-in certificate private key in the /api/get-certs and /api/get-cert endpoints, allowing organization administrators to access it. This exposure enables attackers to forge JWT tokens for any user, including global administrators, potentially compromising the entire organization. Organizations using Casdoor should prioritize patching this vulnerability to mitigate the risk of unauthorized access and token forgery.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Casdoor through 4.4.0 fails to properly mask the instance-wide built-in certificate private key in /api/get-certs and /api/get-cert endpoints, allowing organization administrators to retrieve it. Attackers can use the exposed private key to forge JWT tokens for any user in any organization, including global administrators.