GitHub Advisoryadvisory · Maven

GHSA-gfhx-jjwq-63gv Cross-site Scripting in Apereo CAS

MEDIUM Published 2021-12-10 Modified 2021-12-08 Official page ↗

Aliases: CVE-2021-42567
Ecosystem: Maven
Packages: org.apereo.cas:cas-server-core-web
Severity: Moderate
Weaknesses: CWE-79
Reviewed: 2021-12-08

Affected packages

• Maven org.apereo.cas:cas-server-core-web: < 6.4.2 → fixed in 6.4.2

Description

Apereo CAS through 6.4.1 allows XSS via POST requests sent to the REST API endpoints.

Related

Alias · CVE (1)

CVE-2021-42567 Apereo CAS through 6.4.1 allows XSS via POST requests sent to the REST API endpoints. vulnerability

Weakness · CWE (1)

CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References