x/vulndb: potential Go vuln in github.com/casdoor/casdoor: CVE-2022-38638, GHSA-9vm3-r8gq-cr6x

[tatianab]

In GitHub Security Advisory GHSA-9vm3-r8gq-cr6x, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/casdoor/casdoor	1.103.1	< 1.103.1

See doc/triage.md for instructions on how to triage this report.

modules:
  - module: TODO
    versions:
      - fixed: 1.103.1
    packages:
      - package: github.com/casdoor/casdoor
description: Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability
    via the fullFilePath parameter at /api/upload-resource.
cves:
  - CVE-2022-38638
ghsas:
  - GHSA-9vm3-r8gq-cr6x

[gopherbot]

Change https://go.dev/cl/432164 mentions this issue: data/excluded: add GO-2022-1006.yaml for CVE-2022-38638

[gopherbot]

Change https://go.dev/cl/592774 mentions this issue: data/reports: unexclude 50 reports

[gopherbot]

Change https://go.dev/cl/607230 mentions this issue: data/reports: unexclude 20 reports (28)