PT-2026-64160 · Casdoor · Casdoor
CVE-2026-15630
·
Published
2026-07-23
·
Updated
2026-07-23
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or modify resources in any other tenant by exploiting a mismatch between authorization (based on ?id=) and action (based on request body).
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Casdoor