ROS-20240808-04

A vulnerability in the phpCAS::setUrl() function of the phpCAS authentication library is related to the use of HTTP headers to determine the URL of a service used to validate tickets.
HTTP to determine the URL of the service used to validate tickets, allowing the control of the
host header and use a valid ticket to authenticate to a phpCAS-protected service.
Exploitation of the vulnerability could allow an attacker acting remotely to gain access to a user’s account
user account