Skip to content
OpenAdvisories
Critical DSA-3017-1 1 CVE

php-cas - security update

Published Sep 2, 2014 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 php-cas 1.3.1-4+deb7u1

Vulnerabilities 1

  • Critical 9.8
    CVE-2014-4172

    Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability

    A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before 1.3.3 that allow remote attackers to inject arbitrary web s…

    php-cas org.jasig.cas:cas-client DotNetCasClient jasig/phpcas Debian Packagist Maven NuGet