The vulnerability of the cas-auth plugin for the Apache APISIX cloud API gateway allows a attacker to perform a CSRF attack.

The vulnerability of the cas-auth plugin for the Apache APISIX cloud API lies in the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...