{"id":"EUVD-2022-6767","enisaUuid":"eefaa2ed-e6f7-3696-8ff2-7ce66d9de1dc","description":"Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource.","datePublished":"Sep 9, 2022, 7:40:29 PM","dateUpdated":"Aug 3, 2024, 11:02:14 AM","baseScore":null,"references":"https://github.com/casdoor/casdoor/issues/1035\n","aliases":"CVE-2022-38638\nGHSA-9vm3-r8gq-cr6x\n","assigner":"mitre","epss":1.25,"enisaIdProduct":[{"id":"f055f6b7-1927-3cf8-8fa1-36a68010105d","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"enisaIdVendor":[{"id":"cf9f1bcb-03da-3d2b-8bb7-1ff5756cd482","vendor":{"name":"n/a"}}],"enisaIdVulnerability":[{"id":"52dcedf5-a263-3cd0-8213-8b1e85b5331d","vulnerability":{"id":"GHSA-9vm3-r8gq-cr6x","description":"Casdoor arbitrary file write vulnerability","datePublished":"Sep 10, 2022, 12:00:23 AM","dateUpdated":"Sep 16, 2022, 10:00:39 PM","baseScore":null,"references":"https://nvd.nist.gov/vuln/detail/CVE-2022-38638\nhttps://github.com/casdoor/casdoor/issues/1035\nhttps://github.com/casdoor/casdoor/issues/1063\nhttps://github.com/casdoor/casdoor/commit/411d76798d73446fff4a0244f0475f1ea8bf42dc\nhttps://github.com/casdoor/casdoor\nhttps://github.com/casdoor/casdoor/releases/tag/v1.103.1\n","enisa_id":"EUVD-2022-6767\n","aliases":"GHSA-9vm3-r8gq-cr6x\nCVE-2022-38638\n","epss":0.0,"dataProcessed":"Nov 9, 2026, 3:28:35 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"53fdca53-4f78-38e6-beb5-0332809e11be","vulnerability":{"id":"CVE-2022-38638","description":"Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource.","datePublished":"Sep 9, 2022, 7:40:29 PM","dateUpdated":"Aug 3, 2024, 11:02:14 AM","status":"PUBLISHED","baseScore":null,"references":"https://github.com/casdoor/casdoor/issues/1035\n","enisa_id":"EUVD-2022-6767\n","assigner":"mitre","epss":1.25,"dataProcessed":"Nov 11, 2026, 7:20:34 AM","vulnerabilityProduct":[{"id":"85c5a81a-745a-3f7c-9aa5-1c587995c556","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"vulnerabilityVendor":[{"id":"b7b5e639-2e97-3ca5-bb5a-5093de670e3a","vendor":{"name":"n/a"}}]}},{"id":"78f12625-3e9a-3401-9403-6193f7b3042f","vulnerability":{"id":"PYSEC-2022-43190","description":"Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource.","datePublished":"Sep 9, 2022, 8:15:11 PM","dateUpdated":"Oct 4, 2026, 4:51:55 PM","baseScore":0.0,"references":"https://github.com/casdoor/casdoor/issues/1035\n","enisa_id":"EUVD-2022-6767\n","aliases":"CVE-2022-38638\n","epss":0.0,"dataProcessed":"Nov 8, 2026, 2:15:35 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}