Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 01:56:55 +0000 EUVD-2026-317961 https://cve.radiocsirt.org/vuln/euvd-2026-317961 EUVD-2026-317961 https://cve.radiocsirt.org/vuln/euvd-2026-317961 fkie_cve-2026-6815 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6815 <p>An arbitrary file write vulnerability exists in Casdoor&#39;s Local File System storage provider. Due to insufficient path sanitization, an authenticated attacker with administrative privileges can perform a Path Traversal attack to create or overwrite arbitrary files anywhere on the host filesystem, bypassing the application&#39;s intended storage sandbox.</p> <p>An arbitrary file write vulnerability exists in Casdoor&#39;s Local File System storage provider. Due to insufficient path sanitization, an authenticated attacker with administrative privileges can perform a Path Traversal attack to create or overwrite arbitrary files anywhere on the host filesystem, bypassing the application&#39;s intended storage sandbox.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-6815 GHSA-rmxx-v9rj-vpvg — Casdoor: Arbitrary file write possible through Local File System storage provider https://cve.radiocsirt.org/vuln/ghsa-rmxx-v9rj-vpvg <p><strong>Affected:</strong> Go: github.com/casdoor/casdoor</p> <p>An arbitrary file write vulnerability exists in Casdoor&#39;s Local File System storage provider. Due to insufficient path sanitization, an authenticated attacker with administrative privileges can perform a Path Traversal attack to create or overwrite arbitrary files anywhere on the host filesystem, bypassing the application&#39;s intended storage sandbox.</p> <p><strong>Affected:</strong> Go: github.com/casdoor/casdoor</p> <p>An arbitrary file write vulnerability exists in Casdoor&#39;s Local File System storage provider. Due to insufficient path sanitization, an authenticated attacker with administrative privileges can perform a Path Traversal attack to create or overwrite arbitrary files anywhere on the host filesystem, bypassing the application&#39;s intended storage sandbox.</p> https://cve.radiocsirt.org/vuln/ghsa-rmxx-v9rj-vpvg