Skip to content
OpenAdvisories

Package · Debian

php-cas

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 8.0
    CVE-2022-39369

    Service Hostname Discovery Exploitation in phpCAS

    phpCAS is an authentication library that allows PHP applications to easily authenticate users via a Central Authentication Service (CAS) server. The phpCAS library uses HTTP headers to determine the service URL used to validate tickets. This allows an attacke…

    Apereo phpCAS moodle ocsinventory-server Debian Ubuntu Packagist
  • Critical 9.8
    CVE-2014-4172

    Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability

    A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before 1.3.3 that allow remote attackers to inject arbitrary web s…

    php-cas DotNetCasClient jasig/phpcas org.jasig.cas:cas-client Debian Packagist Maven NuGet
  • Unscored —
    CVE-2017-1000071

    Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to a…

    php-cas php-cas Debian Ubuntu
  • Unscored —
    CVE-2012-5583

    phpCAS before 1.3.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or…

    php-cas Debian