📦 Casdoor

A logic vulnerability in Casdoor's CORS filter allows any website to make cross-domain requests to Casdoor as the logged-in user. This occurs because the Origin header validation only checks for a pre...

This vulnerability in Casdoor v1.636.0 allows attackers to bypass SSH host key verification, potentially enabling man-in-the-middle attacks and credential theft. Any system using the vulnerable SSH cl...