CVE-2026-6815 — CVE-2026-6815
An arbitrary file write vulnerability exists in Casdoor's Local File System storage provider. Due to insufficient path sanitization, an authenticated attacker with administrativ…
Published: 2026-05-11 · CVSS: 5.9 · CVSS 3.1
An arbitrary file write vulnerability exists in Casdoor's Local File System storage provider. Due to insufficient path sanitization, an authenticated attacker with administrative privileges can perform a Path Traversal attack to create or overwrite arbitrary files anywhere on the host filesystem, bypassing the application's intended storage sandbox.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7