Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-1000071
6.8
MEDIUMCVSS v2
Published
July 17, 2017
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server.
GitHub