CVE-2026-6815
CVE-2026-6815
MEDIUM 5.9EPSS 0.6%
An arbitrary file write vulnerability exists in Casdoor's Local File System storage provider. Due to insufficient path sanitization, an authenticated attacker with administrative privileges can perform a Path Traversal attack to create or overwrite arbitrary files anywhere on the host filesystem, bypassing the application's intended storage sandbox.
- Affected
- Casdoor
- CVSS v3.1 CNA
- 5.9 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - EPSS
- 0.59% chance of exploitation in the next 30 days, 47th percentile
- Published
- 2026-05-11
- Updated
- 2026-05-13
Proof-of-concept exploits (1)
- danilo-dellorco/CVE-2026-68152★ · 2026-06-12
ExploitDB entries (1)
Security advisories
- https://kb.cert.org/vuls/id/937808
- https://www.kb.cert.org/vuls/id/937808
- advisories/GHSA-rmxx-v9rj-vpvg