Skip to content
OpenAdvisories

Product · Apereo

Java Apereo CAS Client

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2026-15243

    Improper Validation of Certificate in CAS Client

    Apereo CAS Client accepts any CA-trusted certificate for any hostname, provided the URL the client is calling matches the configured allowlist or regex. An attacker with a MITM position (DNS poisoning, rogue Wi-Fi, malicious proxy, etc.) can provide any CA-si…

    Apereo Jasig CAS Client Java Apereo CAS Client