Skip to content
OpenAdvisories
High DLA-3485-1 1 CVE

php-cas - security update

Published Jul 8, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 php-cas 1.3.6-1+deb10u1

Vulnerabilities 1

  • High 8.0
    CVE-2022-39369

    Service Hostname Discovery Exploitation in phpCAS

    phpCAS is an authentication library that allows PHP applications to easily authenticate users via a Central Authentication Service (CAS) server. The phpCAS library uses HTTP headers to determine the service URL used to validate tickets. This allows an attacke…

    Apereo phpCAS moodle ocsinventory-server Debian Ubuntu Packagist