Executive Summary

This vulnerability exists in Casdoor versions 2.362.0 and earlier. It involves the GetTokenExchangeToken function, which validates JWT signatures but fails to verify that the token's user belongs to the same organization as the target application.

As a result, an attacker can perform a cross-organization token exchange, allowing them to escalate privileges across organizational boundaries.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to privilege escalation across organizational boundaries. An attacker could use a token from one organization to gain unauthorized access to resources or applications in another organization.

This unauthorized access could compromise sensitive data, disrupt services, or allow further exploitation within the affected systems.

Useful 0 Not Useful 0