Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Apereo Component: Java Cas Client Clear all filters
TI-2014-03410 CVE-2014-4172 · GHSA-9fc5-q25c-r2wr

A URL parameter injection vulnerability was found in the back-channel ticket validation…

Priority MEDIUM 51

A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before 1.3.3 that allow rem…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06057 Published 2020-01-24 Partial fix · 1.0.2, 3.3.2 +1 CWE-74