Skip to content
OpenAdvisories

Product · Drupal

Central Authentication System (CAS) Server

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-87937

    Central Authentication System (CAS) Server - Moderately critical - Open redirect - SA-CONTRIB-2026-135

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server allows Fake the Source of Data. This issue affects Central Authentication System (CAS) Server versions: from 0.0.0 to 2.0.4, from 2.1.0 to 2…

    Drupal Central Authentication System (CAS) Server drupal/cas_server Packagist
  • Medium 4.2
    CVE-2026-1554

    Central Authentication System (CAS) Server - Less critical - XML Element Injection - SA-CONTRIB-2026-007

    XML Injection (aka Blind XPath Injection) vulnerability in Drupal Central Authentication System (CAS) Server allows Privilege Escalation.This issue affects Central Authentication System (CAS) Server: from 0.0.0 before 2.0.3, from 2.1.0 before 2.1.2.

    Drupal Central Authentication System (CAS) Server drupal/cas_server Packagist