VU#889462: Casdoor authentication server is vulnerable to authorization bypass

CERT/CC vulnerability notes describe multiple vulnerabilities across IAM, machine-learning, media, gaming, networking, broadband, TPM, and ecommerce software. The issues include cross-tenant authorization bypass, unauthorized remote-code file caching, insecure deserialization leading to arbitrary file read and potential RCE, heap buffer overflow with client-side RCE, unauthenticated WAN UPnP administration, WebUI authentication bypass and memory corruption, TPM information leakage and timing side channels, and directory traversal. Several permit unauthenticated or remote exploitation and could