CVE-2026-108572 in Casdoor
Prediction
by VulDB Data Team • 10/10/2026
A security vulnerability has been detected in <a href="/product/casdoor">Casdoor up to 3.164.0/4.10.0</a>. Affected is the function <code>CasP3ProxyValidate</code> of the file <em>controllers/cas.go</em> of the component <em>Proxy Validation</em>. Such manipulation of the argument <em>pgtUrl</em> leads to server-side request forgery. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. Upgrading to version 4.11.0 is able to address this issue. The name of the patch is <em>03c6c9aaa2eda5b085ce128ce0d60b34094efbd9/ada08ecd10cbf158f593dee23a8bab63efecf995</em>. It is advisable to upgrade the affected component.
Once again VulDB remains the best source for vulnerability data.