CVE-2026-6815

5.9 Moyenne

Publiée le 11/05/2026 à 18:17 · Modifiée le 17/06/2026 à 13:01 · Analysée par le NVD · Source : cret@cert.org

Description

An arbitrary file write vulnerability exists in Casdoor's Local File System storage provider. Due to insufficient path sanitization, an authenticated attacker with administrative privileges can perform a Path Traversal attack to create or overwrite arbitrary files anywhere on the host filesystem, bypassing the application's intended storage sandbox.

Traduire en français

Produits concernés

Casdoor
Casbin casdoor

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.9 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L`

Faiblesses (CWE)

CWE-22

Références

https://kb.cert.org/vuls/id/937808 Third Party AdvisoryVDB Entry
https://www.kb.cert.org/vuls/id/937808 Third Party AdvisoryVDB Entry

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories