CVE-2025-4210 json
Casdoor SCIM User Creation Endpoint scim.go HandleScim authorization
published 2025-05-02 18 mo ago modified 2026-06-17 4 mo ago also GHSA-8w8f-h4cm-c4pg , GO-2025-3661 , EUVD-2025-13124
- cvss
- 7.3
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.8%
- EPSS 1.8% chance of exploitation in 30 days, percentile 78%
- public exploits
- 0
- none known, plus a Nuclei check
Summary
A vulnerability classified as critical was found in Casdoor up to 1.811.0. This vulnerability affects the function HandleScim of the file controllers/scim.go of the component SCIM User Creation Endpoint. The manipulation leads to authorization bypass. The attack can be initiated remotely. Upgrading to version 1.812.0 is able to address this issue. The name of the patch is 3d12ac8dc2282369296c3386815c00a06c6a92fe. It is recommended to upgrade the affected component.
Patch / fix
- go github.com/casdoor/casdoor 1.812.0
- govulncheck-vulndb openSUSE Tumbleweed 0.0.20250506T153719-1.1
opensuse advisories openSUSE-SU-2025:15059-1
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- partial
- Assessed
- 18 mo ago
Exploit prediction
1.82% chance of exploitation in the next 30 days, higher than 78% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Nuclei template Casdoor - Authorization Bypass nuclei detection template
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 6.9 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N |
| CNA | 3.1 | 7.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
| CNA | 3.0 | 7.3 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
| CNA | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| CNA | 4.0 | 6.9 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| GitHub | 3.1 | 7.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| go | github.com/casdoor/casdoor | <1.812.0 all versions |
1.812.0 |
Affected products
- n/a Casdoor
Classification
References
-
github.com
/casdoor/casdoor/commit/3d12ac8dc2282369296c3386815c00a06c6a92fe
patch, web
-
github.com
/casdoor/casdoor/releases/tag/v1.812.0
patch, web
-
vuldb.com
/?id.307180
vdb-entry, technical-description, web
-
vuldb.com
/?ctiid.307180
signature, permissions-required, web
-
vuldb.com
/?submit.556201
third-party-advisory, web
-
nvd.nist.gov
/vuln/detail/CVE-2025-4210
advisory
-
github.com
/casdoor/casdoor
package
-
pkg.go.dev
/vuln/GO-2024-3661
web
Sources
- CVE List CVE-2025-4210
- GitHub Advisory GHSA-8w8f-h4cm-c4pg
- NVD CVE-2025-4210
- OSV GO-2025-3661
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.