~ / search / GHSA-gfhx-jjwq-63gv

GHSA-gfhx-jjwq-63gv

Cross-site Scripting in Apereo CAS

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-42567

Packages

EcosystemPackageAffectedFixed in
Maven org.apereo.cas:cas-server-core-web < 6.4.2 6.4.2

Details

As written in the advisory (Markdown source, shown as plain text).

Apereo CAS through 6.4.1 allows XSS via POST requests sent to the REST API endpoints.

References

External links from the advisory. They lead to third-party sites.