x/vulndb: potential Go vuln in github.com/casdoor/casdoor: GHSA-9vm3-r8gq-cr6x

[GoVulnBot]

In GitHub Security Advisory GHSA-9vm3-r8gq-cr6x, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/casdoor/casdoor	1.103.1	< 1.103.1

Cross references:

• Module github.com/casdoor/casdoor appears in issue x/vulndb: potential Go vuln in github.com/casdoor/casdoor: CVE-2022-24124 #303 EFFECTIVELY_PRIVATE
• CVE-2022-38638 appears in issue x/vulndb: potential Go vuln in github.com/casdoor/casdoor: CVE-2022-38638, GHSA-9vm3-r8gq-cr6x #1006 EFFECTIVELY_PRIVATE
• GHSA-9vm3-r8gq-cr6x appears in issue x/vulndb: potential Go vuln in github.com/casdoor/casdoor: CVE-2022-38638, GHSA-9vm3-r8gq-cr6x #1006 EFFECTIVELY_PRIVATE
• Module github.com/casdoor/casdoor appears in issue x/vulndb: potential Go vuln in github.com/casdoor/casdoor: CVE-2022-38638, GHSA-9vm3-r8gq-cr6x #1006 EFFECTIVELY_PRIVATE
• Module github.com/casdoor/casdoor appears in issue x/vulndb: potential Go vuln in github.com/casdoor/casdoor: GHSA-f93f-55c2-8c89 #1153 EFFECTIVELY_PRIVATE

See doc/triage.md for instructions on how to triage this report.

modules:
  - module: github.com/casdoor/casdoor
    versions:
      - fixed: 1.103.1
    packages:
      - package: github.com/casdoor/casdoor
description: Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability
    via the fullFilePath parameter at /api/upload-resource.
cves:
  - CVE-2022-38638
ghsas:
  - GHSA-9vm3-r8gq-cr6x

[tatianab]

Duplicate of #1006