CVE•Published 2025-05-02•1 article on news•6 live references•NVD data
CVE-2025-4210
Vulnerability data via CVEDB (Shodan)
CVSS v3.1
6.9
MEDIUM
EPSS percentile
76
Exploit Prediction Scoring System · top 24% of all CVEs
Description
A vulnerability classified as critical was found in Casdoor up to 1.811.0. This vulnerability affects the function HandleScim of the file controllers/scim.go of the component SCIM User Creation Endpoint. The manipulation leads to authorization bypass. The attack can be initiated remotely. Upgrading to version 1.812.0 is able to address this issue. The name of the patch is 3d12ac8dc2282369296c3386815c00a06c6a92fe. It is recommended to upgrade the affected component.
Timeline
Published 2025-05-02
External references
Search for exposed instances
Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).
More intel sources (5)
Shodan report
vuln:CVE-2025-4210Country / ASN / product breakdown for the vuln query.
Censys
vulnerabilities.cve_id: CVE-2025-4210Censys host search filtered to this CVE id.
grep.app
CVE-2025-4210Public source-code mentions — fast PoC discovery.
GitHub code
CVE-2025-4210GitHub code search for direct mentions.
Google dork
"CVE-2025-4210" exploit -site:nvd.nist.govWrite-ups and news, NVD excluded.
Known PoCs on GitHub (7)
CVE-2025-42107 repos
Threekiii/Awesome-POCJava
一个漏洞 PoC 知识库。A knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.
GhostTroops/TOPShell
TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things
trganda/starrlistPython
List of awesome starred repositories
CVEDB/awesome-cve-repoShell
CVEDB/topShell
zhanpengliu-tencent/medium-cveunknown
J1ezds/some-starPython
github star 分类汇总