CyberRota Analysis
AI-GeneratedAn authorization bypass vulnerability in Casdoor versions up to 4.4.0 allows attackers to exploit the /api/mcp endpoint, granting them unrestricted access to user administration across all organizations by using any application's clientId and clientSecret. This critical flaw enables attackers to enumerate user records, create or modify administrator accounts, and delete users, posing a significant risk to user data integrity and security. Organizations utilizing Casdoor should prioritize immediate remediation to mitigate potential unauthorized access and data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Casdoor through 4.4.0 contains an authorization bypass vulnerability in the /api/mcp endpoint that allows attackers with any application's clientId and clientSecret to gain unrestricted access to user administration across all organizations. Attackers can enumerate user records including password salts and email addresses, create administrator accounts, modify existing users, and delete them in any organization by supplying legitimate credentials from a single application.