Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Jtenman Component: Central Authentication System Server Clear all filters
TI-2026-01243 CVE-2026-1554 · GHSA-rgcm-m74w-vrfx

Central Authentication System (CAS) Server - Less critical - XML Element Injection - SA-CONTRIB-2026-007

Priority LOW 19

XML Injection (aka Blind XPath Injection) vulnerability in Drupal Central Authentication System (CAS) Server allows Privilege Escalation.This issue affects Central Authentication System (CAS) Server: from 0.0.0 before 2.…

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.00174 Published 2026-02-04 Fixed in 2.0.3, 2.1.2 CWE-91