https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T06:05:05.188564+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-206016 EUVD-2026-206016 2026-10-08T06:05:05.192153+00:00 EUVD-2026-206016 https://cve.radiocsirt.org/vuln/fkie_cve-2023-34927 fkie_cve-2023-34927 2026-10-08T06:05:05.192186+00:00

Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) in the endpoint /api/set-password. This vulnerability allows attackers to arbitrarily change the victim user's password via supplying a crafted URL.

 https://cve.radiocsirt.org/vuln/ghsa-rwcp-qrwg-56cg GHSA-rwcp-qrwg-56cg — Casdoor Cross-Site Request Forgery vulnerability 2026-10-08T06:05:05.192219+00:00

Affected: Go: github.com/casdoor/casdoor

Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) in the endpoint `/api/set-password`. This vulnerability allows attackers to arbitrarily change the victim user's password via supplying a crafted URL.

 https://cve.radiocsirt.org/vuln/gsd-2023-34927 gsd-2023-34927 2026-10-08T06:05:05.192243+00:00 gsd-2023-34927