Skip to content
OpenAdvisories

Package · Ubuntu

php-cas

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.0
    CVE-2022-39369

    Service Hostname Discovery Exploitation in phpCAS

    phpCAS is an authentication library that allows PHP applications to easily authenticate users via a Central Authentication Service (CAS) server. The phpCAS library uses HTTP headers to determine the service URL used to validate tickets. This allows an attacke…

    Apereo phpCAS moodle ocsinventory-server Debian Ubuntu Packagist
  • Unscored —
    CVE-2017-1000071

    Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to a…

    php-cas php-cas Debian Ubuntu