CWRUChielLab/CASAuth

Releases4

Frequency1 year 5 months

Last Release almost 10 years ago

Stars11

A modified version of the CASAuth plugin found here: http://www.mediawiki.org/wiki/Extension:CASAuthentication

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2020-35623 ↗	Dec 21, 2020Monday, 21 December 2020, 23:15	7.5 HIGH	5 MEDIUM
An issue was discovered in the CasAuth extension for MediaWiki through 1.35.1. Due to improper username validation, it allowed user impersonation with trivial manipulations of certain characters within a given username. An ordinary user may be able to login as a "bureaucrat user" who has a similar username, as demonstrated by usernames that differ only in (1) bidirectional override symbols or (2) blank space.