CVE-2025-4210 json
Casdoor SCIM User Creation Endpoint scim.go HandleScim authorization
published last yr. modified 4mo ago also GHSA-8w8f-h4cm-c4pg , GO-2025-3661 , EUVD-2025-13124
- cvss
- 7.3
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.8%
- EPSS 1.8% chance of exploitation in 30 days, percentile 78%
- public exploits
- 0
- none known, plus a Nuclei check
Summary
A vulnerability classified as critical was found in Casdoor up to 1.811.0. This vulnerability affects the function HandleScim of the file controllers/scim.go of the component SCIM User Creation Endpoint. The manipulation leads to authorization bypass. The attack can be initiated remotely. Upgrading to version 1.812.0 is able to address this issue. The name of the patch is 3d12ac8dc2282369296c3386815c00a06c6a92fe. It is recommended to upgrade the affected component.
Patch / fix
- go github.com/casdoor/casdoor 1.812.0
- govulncheck-vulndb openSUSE Tumbleweed 0.0.20250506T153719-1.1
opensuse advisories openSUSE-SU-2025:15059-1
Is CVE-2025-4210 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerCISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- partial
- Assessed
- last yr.
Exploit prediction
1.82% chance of exploitation in the next 30 days, higher than 78% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- Nuclei template Casdoor - Authorization Bypass nuclei detection template
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 6.9 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N |
| CNA | 3.1 | 7.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
| CNA | 3.0 | 7.3 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
| CNA | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| CNA | 4.0 | 6.9 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| GitHub | 3.1 | 7.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| go | github.com/casdoor/casdoor | <1.812.0 all versions |
1.812.0 |
Affected products
- n/a Casdoor
Classification
References
-
github.com
/casdoor/casdoor/commit/3d12ac8dc2282369296c3386815c00a06c6a92fe
patch, web
-
github.com
/casdoor/casdoor/releases/tag/v1.812.0
patch, web
-
vuldb.com
/?id.307180
vdb-entry, technical-description, web
-
vuldb.com
/?ctiid.307180
signature, permissions-required, web
-
vuldb.com
/?submit.556201
third-party-advisory, web
-
nvd.nist.gov
/vuln/detail/CVE-2025-4210
advisory
-
github.com
/casdoor/casdoor
package
-
pkg.go.dev
/vuln/GO-2024-3661
web
Sources
- CVE List CVE-2025-4210
- GitHub Advisory GHSA-8w8f-h4cm-c4pg
- NVD CVE-2025-4210
- OSV GO-2025-3661
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.