CVE-2024-41658

Casdoor is a UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform. In Casdoor 1.577.0 and earlier, he purchase URL that is created to generate a WechatPay QR code is vulnerable to reflected XSS. When purchasing an item through casdoor, the product page allows you to pay via wechat pay. When using wechat pay, a QR code with the wechat pay link is displayed on the payment page, hosted on the domain of casdoor. This page takes a query parameter from the url successUrl, and redirects the user to that url after a successful purchase. Because the user has no reason to think that the payment page contains sensitive information, they may share it with other or can be social engineered into sending it to others. An attacker can then craft the casdoor link with a special url and send it back to the user, and once payment has gone though an XSS attack occurs.

• CWE-79
• CWE-79

• https://github.com/casdoor/casdoor/blob/v1.577.0/web/src/QrCodePage.jsProduct
• https://securitylab.github.com/advisories/GHSL-2024-035_GHSL-2024-036_casdoor/Exploit, Third Party Advisory

Published

Aug 20, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-4165A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-41650Insecure Permissions vulnerability in Open Robotics Robotic …9.8
• CVE-2024-41651An issue in Prestashop v.8.1.7 and before allows a remote at…8.1
• CVE-2024-41655TF2 Item Format helps users format TF2 items to the communit…7.5
• CVE-2024-41656Sentry is an error tracking and performance monitoring platf…5.4
• CVE-2024-41657Casdoor is a UI-first Identity and Access Management (IAM) /…8.8
• CVE-2024-41659memos is a privacy-first, lightweight note-taking service. A…8.1
• CVE-2024-4166A vulnerability has been found in Tenda 4G300 1.01.42 and cl…8.8
• CVE-2024-41660slpd-lite is a unicast SLP UDP server. Any OpenBMC system th…9.8
• CVE-2024-41661Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2024-41662VNote is a note-taking platform. A Cross-Site Scripting (XSS…9.6
• CVE-2024-41663Canarytokens help track activity and actions on a network. …3.5