org.apereo.cas:cas-management-webapp (5.0.7), org.apereo.cas:cas-management-webapp-support (5.0.7) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.7)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.7 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-server-core (5.2.5), org.apereo.cas:cas-server-core-audit (5.2.5) +155 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.2.5)

org.apereo.cas:cas-server-core-web MAVEN version 5.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-server-core 5.2.5 - org.apereo.cas:cas-server-core-audit 5.2.5 -...

org.apereo.cas:cas-management-webapp-support (5.2.0-rc2), org.apereo.cas:cas-server-core (5.2.0-rc2) +130 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.2.0-rc2)

org.apereo.cas:cas-server-core-web MAVEN version 5.2.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.2.0-rc2 - org.apereo.cas:cas-server-core...

org.apereo.cas:cas-management-webapp-support (5.3.0-rc1), org.apereo.cas:cas-server-core-configuration-metadata-repository (5.3.0-rc1) +10 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.3.0-rc1)

org.apereo.cas:cas-server-core-web MAVEN version 5.3.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.3.0-rc1 -...

org.apereo.cas:cas-management-webapp (5.0.1), org.apereo.cas:cas-management-webapp-support (5.0.1) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.1)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.1 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-server-core (5.2.4), org.apereo.cas:cas-server-core-audit (5.2.4) +155 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.2.4)

org.apereo.cas:cas-server-core-web MAVEN version 5.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-server-core 5.2.4 - org.apereo.cas:cas-server-core-audit 5.2.4 -...

org.apereo.cas:cas-management-webapp (5.0.6), org.apereo.cas:cas-management-webapp-support (5.0.6) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.6)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.6 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-management-webapp-support (5.3.0-rc2), org.apereo.cas:cas-server-core-configuration-metadata-repository (5.3.0-rc2) +10 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.3.0-rc2)

org.apereo.cas:cas-server-core-web MAVEN version 5.3.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.3.0-rc2 -...

org.apereo.cas:cas-management-webapp (5.0.3.1), org.apereo.cas:cas-management-webapp-support (5.0.3.1) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.3.1)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.3.1 - org.apereo.cas:cas-management-webapp-suppo...

org.apereo.cas:cas-management-webapp (5.0.2), org.apereo.cas:cas-management-webapp-support (5.0.2) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.2)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.2 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-management-webapp (5.0.9), org.apereo.cas:cas-management-webapp-support (5.0.9) +75 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.9)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.9 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-management-webapp-support (5.1.0), org.apereo.cas:cas-server-core (5.1.0) +113 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.1.0)

org.apereo.cas:cas-server-core-web MAVEN version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.1.0 - org.apereo.cas:cas-server-core 5.1.0 -...

org.apereo.cas:cas-management-webapp-support (5.1.9), org.apereo.cas:cas-server-core (5.1.9) +114 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.1.9)

org.apereo.cas:cas-server-core-web MAVEN version 5.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.1.9 - org.apereo.cas:cas-server-core 5.1.9 -...

org.apereo.cas:cas-server-core (5.2.3), org.apereo.cas:cas-server-core-audit (5.2.3) +155 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.2.3)

org.apereo.cas:cas-server-core-web MAVEN version 5.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-server-core 5.2.3 - org.apereo.cas:cas-server-core-audit 5.2.3 -...

org.apereo.cas:cas-server-core (5.2.7), org.apereo.cas:cas-server-core-audit (5.2.7) +155 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.2.7)

org.apereo.cas:cas-server-core-web MAVEN version 5.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-server-core 5.2.7 - org.apereo.cas:cas-server-core-audit 5.2.7 -...

org.apereo.cas:cas-server-support-gauth (>=6.2.0, <=6.2.3), org.apereo.cas:cas-server-support-gauth-core (>=6.2.0, <=6.2.3) +9 more potentially affected by CVE-2020-27178 via org.apereo.cas:cas-server-support-otp-mfa-core (>=6.2.0, <=6.2.3)

org.apereo.cas:cas-server-support-otp-mfa-core MAVEN version =6.2.0, =6.2.0, =6.2.0, =6.2.0, =6.2.0, =6.2.0, =6.2.0, =6.2.0, =6.2.0, =6.2.0, =6.2.0, =6.2.0, =6.2.3 Source cves: CVE-2020-27178 Source advisory: GHSA-Q39C-5VH5-VW2P...

org.apereo.cas:cas-server-support-gauth (>=6.0.0, <=6.1.7.1), org.apereo.cas:cas-server-support-gauth-core (>=6.0.0, <=6.1.7.1) +8 more potentially affected by CVE-2020-27178 via org.apereo.cas:cas-server-support-otp-mfa-core (>=6.0.0, <=6.1.7.1)

org.apereo.cas:cas-server-support-otp-mfa-core MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.1.0-rc3, =6.0.0, =6.0.0, =6.1.0, =6.1.7.1 Source cves: CVE-2020-27178 Source advisory: GHSA-Q39C-5VH5-VW2P...

org.jasig.cas:cas-server-webapp (3.4-rc1), org.jasig.openregistry:openregistry-repository-jpa-impl (>=0.1-m3.1, <=0.1-m4) +3 more potentially affected by CVE-2020-10693 via org.hibernate:hibernate-validator (4.0.1.ga)

org.hibernate:hibernate-validator MAVEN version 4.0.1.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.jasig.cas:cas-server-webapp 3.4-rc1 -...

Information Disclosure

cas-server-support-otp-mfa is vulnerable to information disclosure. The vulnerability exists as the user's secret key is sent as a GET parameter in an img tag when Google Authenticator is used...

CVE-2018-13257

The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central Authentication Service CAS service ticket validation, enabling a phishing attack from the CAS server login page...