EUVD-2024-33685

Malicious code in bioql PyPI...

CVE-2024-11209

A vulnerability was found in Apereo CAS 6.6. It has been classified as critical. This affects an unknown part of the file /login?service of the component 2FA. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2024-11208

A vulnerability was found in Apereo CAS 6.6 and classified as problematic. Affected by this issue is some unknown functionality of the file /login?service. The manipulation leads to session expiration. The attack may be launched remotely. The complexity of an attack is rather high. The exploitati...

CVE-2024-11209

The connected documents confirm a vulnerability in Apereo CAS 6.6 within the 2FA login flow, specifically affecting the /login?service path. The root cause is described as an improper authentication issue, enabling remote initiation of an attack, with public disclosure of the exploit. All sources...

CVE-2024-11209 Apereo CAS 2FA login improper authentication

A vulnerability was found in Apereo CAS 6.6. It has been classified as critical. This affects an unknown part of the file /login?service of the component 2FA. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2024-11208

CVE-2024-11208 affects Apereo CAS 6.6. The issue concerns an unknown functionality under the /login?service endpoint where manipulation leads to session expiration. Exploitation is described as remote with high attack complexity, but public disclosure exists. The documents identify the vulnerabil...

CVE-2024-11208 Apereo CAS login session expiration

A vulnerability was found in Apereo CAS 6.6 and classified as problematic. Affected by this issue is some unknown functionality of the file /login?service. The manipulation leads to session expiration. The attack may be launched remotely. The complexity of an attack is rather high. The exploitati...

CVE-2024-11207

A vulnerability has been found in Apereo CAS 6.6 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /login. The manipulation of the argument redirecturi leads to open redirect. The attack can be launched remotely. The exploit has been disclosed t...

CVE-2024-11207

CVE-2024-11207 affects Apereo CAS 6.6. The vulnerability is an open redirect in the /login flow caused by manipulation of the redirect_uri parameter. It is exploitable remotely and details were disclosed publicly. Connected sources confirm impact is limited to open redirect; there is no new remed...

CVE-2024-11207 Apereo CAS login redirect

A vulnerability has been found in Apereo CAS 6.6 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /login. The manipulation of the argument redirecturi leads to open redirect. The attack can be launched remotely. The exploit has been disclosed t...