CVE-2018-13257
Published
CVSS v3
6.1
MEDIUM
CVSS v2
5.8
MEDIUM
Affected
1
PROJECT
Description
The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central Authentication Service (CAS) service ticket validation, enabling a phishing attack from the CAS server login page.
GitHub