CVE-2026-5469 — Casdoor Webhook URL server-side request forgery

CVE-2026-5469

Casdoor Webhook URL server-side request forgery PUBLISHED

Description (CNA)

A weakness has been identified in Casdoor 2.356.0. This vulnerability affects unknown code of the component Webhook URL Handler. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Affected (CNA)

Vendor / product	Versions
n/a / Casdoor	affected 2.356.0

CWE

CWE-918

References

https://vuldb.com/vuln/355073
https://vuldb.com/vuln/355073/cti
https://vuldb.com/submit/781771

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.