CVE-2021-42567

Apereo CAS through 6.4.1 allows XSS via POST requests sent to the REST API endpoints...

org.apereo.cas:cas-server-core (5.2.9), org.apereo.cas:cas-server-core-audit (5.2.9) +155 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.2.9)

org.apereo.cas:cas-server-core-web MAVEN version 5.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-server-core 5.2.9 - org.apereo.cas:cas-server-core-audit 5.2.9 -...

org.apereo.cas:cas-management-webapp-support (5.1.8), org.apereo.cas:cas-server-core (5.1.8) +114 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.1.8)

org.apereo.cas:cas-server-core-web MAVEN version 5.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.1.8 - org.apereo.cas:cas-server-core 5.1.8 -...

org.apereo.cas:cas-management-webapp (5.0.7), org.apereo.cas:cas-management-webapp-support (5.0.7) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.7)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.7 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-server-core-configuration-metadata-repository (5.3.3), org.apereo.cas:cas-server-support-passwordless (5.3.3) +11 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.3.3)

org.apereo.cas:cas-server-core-web MAVEN version 5.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-server-core-configuration-metadata-repository 5.3.3 -...

org.apereo.cas:cas-management-webapp (5.0.0.m1), org.apereo.cas:cas-management-webapp-support (5.0.0.m1) +54 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.0.m1)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.0.m1 -...

org.apereo.cas:cas-server-core-configuration-metadata-repository (5.3.0), org.apereo.cas:cas-server-support-passwordless (5.3.0) +11 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.3.0)

org.apereo.cas:cas-server-core-web MAVEN version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-server-core-configuration-metadata-repository 5.3.0 -...

org.apereo.cas:cas-management-webapp-support (5.3.0-rc2), org.apereo.cas:cas-server-core-configuration-metadata-repository (5.3.0-rc2) +10 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.3.0-rc2)

org.apereo.cas:cas-server-core-web MAVEN version 5.3.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.3.0-rc2 -...

org.apereo.cas:cas-management-webapp (5.0.5), org.apereo.cas:cas-management-webapp-support (5.0.5) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.5)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.5 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-management-webapp-support (5.3.0-rc3) potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.3.0-rc3)

org.apereo.cas:cas-server-core-web MAVEN version 5.3.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.3.0-rc3 Source cves: CVE-2021-42567 Sour...

org.apereo.cas:cas-management-webapp-support (5.1.0), org.apereo.cas:cas-server-core (5.1.0) +113 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.1.0)

org.apereo.cas:cas-server-core-web MAVEN version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.1.0 - org.apereo.cas:cas-server-core 5.1.0 -...

org.apereo.cas:cas-server-core (5.2.7), org.apereo.cas:cas-server-core-audit (5.2.7) +155 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.2.7)

org.apereo.cas:cas-server-core-web MAVEN version 5.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-server-core 5.2.7 - org.apereo.cas:cas-server-core-audit 5.2.7 -...

org.apereo.cas:cas-server-core (5.2.0), org.apereo.cas:cas-server-core-audit (5.2.0) +155 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.2.0)

org.apereo.cas:cas-server-core-web MAVEN version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-server-core 5.2.0 - org.apereo.cas:cas-server-core-audit 5.2.0 -...

org.apereo.cas:cas-server-core (5.2.0-rc3), org.apereo.cas:cas-server-core-audit (5.2.0-rc3) +147 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.2.0-rc3)

org.apereo.cas:cas-server-core-web MAVEN version 5.2.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-server-core 5.2.0-rc3 - org.apereo.cas:cas-server-core-audit 5.2.0-r...

org.apereo.cas:cas-server-support-interrupt-webflow (v6.4.0-rc5), org.apereo.cas:cas-server-support-passwordless (v6.4.0-rc5) +16 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (v6.4.0-rc5)

org.apereo.cas:cas-server-core-web MAVEN version v6.4.0-rc5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-server-support-interrupt-webflow v6.4.0-rc5 -...

org.apereo.cas:cas-management-webapp (5.0.0), org.apereo.cas:cas-management-webapp-support (5.0.0) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.0)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.0 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-management-webapp-support (5.1.1), org.apereo.cas:cas-server-core (5.1.1) +113 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.1.1)

org.apereo.cas:cas-server-core-web MAVEN version 5.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.1.1 - org.apereo.cas:cas-server-core 5.1.1 -...

org.apereo.cas:cas-management-webapp (5.0.1), org.apereo.cas:cas-management-webapp-support (5.0.1) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.1)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.1 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-management-webapp-support (5.1.4), org.apereo.cas:cas-server-core (5.1.4) +114 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.1.4)

org.apereo.cas:cas-server-core-web MAVEN version 5.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.1.4 - org.apereo.cas:cas-server-core 5.1.4 -...

org.apereo.cas:cas-management-webapp (5.0.0.rc4), org.apereo.cas:cas-management-webapp-support (5.0.0.rc4) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.0.rc4)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.0.rc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.0.rc4 -...