danilo-dellorco/CVE-2026-6815

PoC

Proof of Concept (PoC) exploit for CVE-2026-6815: Authenticated Path Traversal & Arbitrary File Write in Casdoor (< 3.54.1) leading to RCE/DoS.

view exploit source poc_in_githubauthor danilo-dellorcopublished 2026-06-04catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-6815US	—	0.51% (44th)	Exploit	2026-05-11
An arbitrary file write vulnerability exists in Casdoor's Local File System storage provider. Due to insufficient path sanitization, an authenticated attacker with administrative p…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.