CVE-2022-24124

The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations

published January 29, 2022

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS

—

EPSS

55%

Percentile

99.0

In the wild

Unconfirmed

What it is

The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.55295 · 99.0th percentile
Published: 2022-01-29T22:53Z

EPSS history

Timeline

29 JAN 22:53Z
The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations
cvelistv5