PT-2026-55389 · Go · Github.Com/Casdoor/Casdoor

Publicado 2026-05-28 · Atualizado 2026-05-28

OSV

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Casdoor versions 2.362.0 and earlier contain a vulnerability that allows an attacker to bypass authentication by supplying an arbitrary signing certificate. The buildSpCertificateStore function extracts the X.509 certificate directly from the incoming SAMLResponse instead of using the trusted pre-configured Identity Provider certificate, allowing an attacker to forge assertions signed with an attacker-controlled key.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

GHSA-FWGQ-J9R9-QJGR

Produtos afetados

Github.Com/Casdoor/Casdoor

Referências · 4

• https://github.com/casdoor/casdoor · Nota
• https://kb.cert.org/vuls/id/780781 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-9090 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-fwgq-j9r9-qjgr · Aviso do Fabricante