EDB-52439

PoC

Casdoor 2.95.0 - Cross-Site Request Forgery (CSRF)

view exploit source exploit_dbtype webappsauthor Van Lam Nguyenpublished 2025-10-29catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2023-34927USmedium6.5Exploit
Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) in the endpoint /api/set-password. This vulnerability allows attackers to arbitrarily chang…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan