CVE-2026-5467: Casdoor OAuth Authorization Request redirect
A vulnerability was identified in Casdoor 2.356.0. Affected by this issue is some unknown functionality of the component OAuth Authorization Request Handler. Such manipulation of the argument redirecturi leads to open redirect. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5467?
The severity of CVE-2026-5467 is considered medium due to its potential for open redirect exploitation.
How do I fix CVE-2026-5467?
To fix CVE-2026-5467, update Casdoor to version 2.356.1 or later where the vulnerability is patched.
What component is affected by CVE-2026-5467?
CVE-2026-5467 affects the OAuth Authorization Request Handler functionality in Casdoor version 2.356.0.
What type of attack can CVE-2026-5467 enable?
CVE-2026-5467 can enable open redirect attacks through manipulation of the redirect_uri argument.
Who is affected by CVE-2026-5467?
Users and administrators running Casdoor version 2.356.0 are affected by CVE-2026-5467.