Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2010-3691
3.3
LOWCVSS v2
Published
October 7, 2010
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
PGTStorage/pgt-file.php in phpCAS before 1.1.3, when proxy mode is enabled, allows local users to overwrite arbitrary files via a symlink attack on an unspecified file.
apereo/phpCAS
GitHubApereo PHP CAS Client
GitHubApereo PHP CAS Client= 0.2, = 0.3, = 0.3.1, = 0.3.2, = 0.4, = 0.4.1, = 0.4.8, = 0.4.9, = 0.4.10, = 0.6.0, = 0.5.1, = 0.4.18, = 0.4.17, = 0.5.0, = 0.4.12, = 0.4.11, = 0.4.20, = 0.4.19, = 1.0.1, = 1.0.0, = 0.4.16, = 0.4.15, = 0.4.23, = 0.4.14, = 0.4.13, = 0.4.22, = 0.4.21, <= 1.1.2, = 1.1.1, = 1.1.0NVD