org.apereo.cas:cas-server-core (5.3.0-rc4), org.apereo.cas:cas-server-core-api-audit (5.3.0-rc4) +225 more potentially affected by CVE-2021-44878 via org.pac4j:pac4j-oidc (3.0.0-rc2)

org.pac4j:pac4j-oidc MAVEN version 3.0.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-oidc and may be impacted: - org.apereo.cas:cas-server-core 5.3.0-rc4 - org.apereo.cas:cas-server-core-api-audit 5.3.0-rc4 -...

org.apereo.cas:cas-management-webapp (>=5.0.0.m1, <=5.0.0.m2), org.apereo.cas:cas-management-webapp-support (>=5.0.0.m1, <=5.0.0.m2) +75 more potentially affected by CVE-2021-44878 via org.pac4j:pac4j-oidc (1.8.8)

org.pac4j:pac4j-oidc MAVEN version 1.8.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-oidc and may be impacted: - org.apereo.cas:cas-management-webapp =5.0.0.m1, =5.0.0.m1, =5.0.0.m1, =5.0.0.m1, =5.0.0.m1, =5.0.0.m1, =5.0.0.m1,...

org.apereo.cas:cas-management-webapp (>=5.0.0.rc4, <=5.0.2), org.apereo.cas:cas-management-webapp-support (>=5.0.0.rc4, <=5.0.2) +85 more potentially affected by CVE-2021-44878 via org.pac4j:pac4j-oidc (1.9.4)

org.pac4j:pac4j-oidc MAVEN version 1.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-oidc and may be impacted: - org.apereo.cas:cas-management-webapp =5.0.0.rc4, =5.0.0.rc4, =5.0.0.rc4, =5.0.0.rc4, =5.0.0.rc4, =5.0.0.rc4, =5.0.0.rc4...

io.github.johnjcool:keycloak-cas-services (>=4.2.0.final, <=4.2.1.final), org.keycloak:keycloak-dependencies-server-min (4.2.0.final) +3 more potentially affected by CVE-2021-4133 via org.keycloak:keycloak-services (4.2.0.final)

org.keycloak:keycloak-services MAVEN version 4.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.2.0.final, =4.2.1.final -...

io.github.johnjcool:keycloak-cas-services (>=4.3.0.final, <=4.3.1.final), org.keycloak:keycloak-dependencies-server-min (4.3.0.final) +3 more potentially affected by CVE-2021-4133 via org.keycloak:keycloak-services (4.3.0.final)

org.keycloak:keycloak-services MAVEN version 4.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.3.0.final, =4.3.1.final -...

io.github.johnjcool:keycloak-cas-services (4.5.0.final), org.keycloak:keycloak-dependencies-server-min (4.5.0.final) +3 more potentially affected by CVE-2021-4133 via org.keycloak:keycloak-services (4.5.0.final)

org.keycloak:keycloak-services MAVEN version 4.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.5.0.final -...

org.apereo.cas:cas-management-webapp-support (5.3.0-rc3) potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.3.0-rc3)

org.apereo.cas:cas-server-core-web MAVEN version 5.3.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.3.0-rc3 Source cves: CVE-2021-42567 Sour...

org.apereo.cas:cas-management-webapp (5.0.7), org.apereo.cas:cas-management-webapp-support (5.0.7) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.7)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.7 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-server-core (5.2.5), org.apereo.cas:cas-server-core-audit (5.2.5) +155 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.2.5)

org.apereo.cas:cas-server-core-web MAVEN version 5.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-server-core 5.2.5 - org.apereo.cas:cas-server-core-audit 5.2.5 -...

GHSA-GFHX-JJWQ-63GV Cross-site Scripting in Apereo CAS

Apereo CAS through 6.4.1 allows XSS via POST requests sent to the REST API endpoints...

org.apereo.cas:cas-management-webapp-support (5.3.0-rc1), org.apereo.cas:cas-server-core-configuration-metadata-repository (5.3.0-rc1) +10 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.3.0-rc1)

org.apereo.cas:cas-server-core-web MAVEN version 5.3.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.3.0-rc1 -...

org.apereo.cas:cas-management-webapp (5.0.1), org.apereo.cas:cas-management-webapp-support (5.0.1) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.1)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.1 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-server-core (5.2.4), org.apereo.cas:cas-server-core-audit (5.2.4) +155 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.2.4)

org.apereo.cas:cas-server-core-web MAVEN version 5.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-server-core 5.2.4 - org.apereo.cas:cas-server-core-audit 5.2.4 -...

org.apereo.cas:cas-management-webapp (5.0.6), org.apereo.cas:cas-management-webapp-support (5.0.6) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.6)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.6 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-management-webapp-support (5.3.0-rc2), org.apereo.cas:cas-server-core-configuration-metadata-repository (5.3.0-rc2) +10 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.3.0-rc2)

org.apereo.cas:cas-server-core-web MAVEN version 5.3.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.3.0-rc2 -...

org.apereo.cas:cas-management-webapp-support (5.2.0-rc2), org.apereo.cas:cas-server-core (5.2.0-rc2) +130 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.2.0-rc2)

org.apereo.cas:cas-server-core-web MAVEN version 5.2.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.2.0-rc2 - org.apereo.cas:cas-server-core...

org.apereo.cas:cas-management-webapp (5.0.0.rc3), org.apereo.cas:cas-management-webapp-support (5.0.0.rc3) +75 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.0.rc3)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.0.rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.0.rc3 -...

org.apereo.cas:cas-management-webapp-support (5.1.4), org.apereo.cas:cas-server-core (5.1.4) +114 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.1.4)

org.apereo.cas:cas-server-core-web MAVEN version 5.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.1.4 - org.apereo.cas:cas-server-core 5.1.4 -...

org.apereo.cas:cas-management-webapp (5.0.2), org.apereo.cas:cas-management-webapp-support (5.0.2) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.2)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.2 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-management-webapp (5.0.3.1), org.apereo.cas:cas-management-webapp-support (5.0.3.1) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.3.1)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.3.1 - org.apereo.cas:cas-management-webapp-suppo...