Exploit for CVE-2023-25581

This Python script demonstrates the exploitation of the CVE-2023...

io.buji:buji-pac4j (1.2.0), org.jasig.cas:cas-server-support-pac4j (4.0.0-rc1) +8 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (1.4.0)

org.pac4j:pac4j-core MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.buji:buji-pac4j 1.2.0 - org.jasig.cas:cas-server-support-pac4j 4.0.0-rc1 - org.pac4j:j2e-pac4j 1.0.0 -...

io.buji:buji-pac4j (1.2.1), io.ratpack:ratpack-pac4j (0.9.3) +9 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (1.4.1)

org.pac4j:pac4j-core MAVEN version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.buji:buji-pac4j 1.2.1 - io.ratpack:ratpack-pac4j 0.9.3 - org.jasig.cas:cas-server-support-pac4j =4.0.0-rc2, =0.4.3,...

org.jasig.cas:cas-management-webapp (>=4.2.0-rc1, <=4.2.1), org.jasig.cas:cas-management-webapp-support (>=4.2.0-rc1, <=4.2.1) +65 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (1.8.2)

org.pac4j:pac4j-core MAVEN version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.jasig.cas:cas-management-webapp =4.2.0-rc1, =4.2.0-rc1, =4.2.0-rc1, =4.2.0-rc1, =4.2.0-rc3, =4.2.0-rc1, =4.2.0-rc1,...

com.jetdrone:yoke.middleware.pac4j (>=2.0.1, <=2.0.21), io.buji:buji-pac4j (1.2.3) +11 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (1.5.1)

org.pac4j:pac4j-core MAVEN version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - com.jetdrone:yoke.middleware.pac4j =2.0.1, =0.9.5, =0.9.11 - org.pac4j:j2e-pac4j 1.0.3 - org.pac4j:pac4j-cas 1.5.1 -...

org.pac4j:pac4j-cas (1.8.3), org.pac4j:pac4j-config (1.8.3) +15 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (1.8.3)

org.pac4j:pac4j-core MAVEN version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.pac4j:pac4j-cas 1.8.3 - org.pac4j:pac4j-config 1.8.3 - org.pac4j:pac4j-gae 1.8.3 - org.pac4j:pac4j-http 1.8.3 -...

io.ratpack:ratpack-pac4j (>=1.2.0-rc-1, <=1.3.3), net.binggl:ninja-google-oauth-module (>=1.0.2, <=1.0.3) +16 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (1.8.5)

org.pac4j:pac4j-core MAVEN version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.ratpack:ratpack-pac4j =1.2.0-rc-1, =1.0.2, =1.0.3 - org.pac4j:j2e-pac4j 1.2.2 - org.pac4j:pac4j-cas 1.8.5 -...

io.buji:buji-pac4j (1.2.2), io.ratpack:ratpack-pac4j (0.9.4) +10 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (1.5.0)

org.pac4j:pac4j-core MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.buji:buji-pac4j 1.2.2 - io.ratpack:ratpack-pac4j 0.9.4 - org.pac4j:j2e-pac4j 1.0.2 - org.pac4j:pac4j-cas 1.5.0 -...

com.agifac.lib:app-framework (>=12.1.0, <=16.0.4), com.agifac.lib:maf-defaultplugins-extension (>=12.1.1, <=16.0.4) +37 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (1.7.0)

org.pac4j:pac4j-core MAVEN version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - com.agifac.lib:app-framework =12.1.0, =12.1.1, =12.1.2, =12.1.0, =12.1.4, =16.1.0, =16.1.0, =16.1.0, =16.1.0, =16.1.0,...

org.pac4j:j2e-pac4j (1.3.0), org.pac4j:pac4j-cas (1.9.0) +14 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (1.9.0)

org.pac4j:pac4j-core MAVEN version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.pac4j:j2e-pac4j 1.3.0 - org.pac4j:pac4j-cas 1.9.0 - org.pac4j:pac4j-config 1.9.0 - org.pac4j:pac4j-gae 1.9.0 -...

org.apereo.cas:cas-management-webapp-support (5.1.0-rc4), org.apereo.cas:cas-management-webapp-support-ldap (5.1.0-rc4) +140 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (2.0.0-rc2)

org.pac4j:pac4j-core MAVEN version 2.0.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.1.0-rc4 - org.apereo.cas:cas-management-webapp-support-ldap 5.1.0-rc...

org.apereo.cas:cas-management-webapp-support (5.3.0-rc1), org.apereo.cas:cas-management-webapp-support-ldap (>=5.2.1, <=5.3.0-rc1) +226 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (2.2.0)

org.pac4j:pac4j-core MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.3.0-rc1 - org.apereo.cas:cas-management-webapp-support-ldap =5.2.1,...

cn.jbone:jbone-errors (1.0.0), net.binggl:ninja-google-oauth-module (1.0.7) +219 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (2.3.1)

org.pac4j:pac4j-core MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - cn.jbone:jbone-errors 1.0.0 - net.binggl:ninja-google-oauth-module 1.0.7 -...

com.stackstate:akka-http-pac4j_2.12 (>=0.1.0, <=0.4.5), org.pac4j.jax-rs:core (3.0.0-rc1) +24 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (3.0.0-rc1)

org.pac4j:pac4j-core MAVEN version 3.0.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - com.stackstate:akka-http-pac4j2.12 =0.1.0, =0.4.5 - org.pac4j.jax-rs:core 3.0.0-rc1 - org.pac4j.jax-rs:testing...

org.apereo.cas:cas-server-core (5.3.0-rc4), org.apereo.cas:cas-server-core-api-audit (5.3.0-rc4) +244 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (3.0.0-rc2)

org.pac4j:pac4j-core MAVEN version 3.0.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.apereo.cas:cas-server-core 5.3.0-rc4 - org.apereo.cas:cas-server-core-api-audit 5.3.0-rc4 -...

org.apereo.cas:cas-management-webapp-configuration (5.3.1), org.apereo.cas:cas-management-webapp-support (>=5.3.1, <=5.3.3) +247 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (3.0.1)

org.pac4j:pac4j-core MAVEN version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.apereo.cas:cas-management-webapp-configuration 5.3.1 - org.apereo.cas:cas-management-webapp-support =5.3.1, =5.3.1,...

org.apereo.cas:cas-management-webapp-configuration (5.3.3), org.apereo.cas:cas-server-core (5.3.3) +246 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (3.1.0)

org.pac4j:pac4j-core MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.apereo.cas:cas-management-webapp-configuration 5.3.3 - org.apereo.cas:cas-server-core 5.3.3 -...

cn.jbone:jbone-sso-client (1.0.0), com.stackstate:akka-http-pac4j_2.12 (0.4.6) +293 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (3.4.0)

org.pac4j:pac4j-core MAVEN version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - cn.jbone:jbone-sso-client 1.0.0 - com.stackstate:akka-http-pac4j2.12 0.4.6 - io.buji:buji-pac4j 4.1.0 -...

org.apereo.cas:cas-mgmt-api-configuration (6.1.0-rc2), org.apereo.cas:cas-mgmt-core-util (6.1.0-rc2) +301 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (3.6.1)

org.pac4j:pac4j-core MAVEN version 3.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.apereo.cas:cas-mgmt-api-configuration 6.1.0-rc2 - org.apereo.cas:cas-mgmt-core-util 6.1.0-rc2 -...

cc.akkaha:asura-play_2.12 (0.6.0), cc.akkaha:pea_2.12 (>=0.1.5, <=0.7.0) +641 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (3.7.0)

org.pac4j:pac4j-core MAVEN version 3.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - cc.akkaha:asura-play2.12 0.6.0 - cc.akkaha:pea2.12 =0.1.5, =0.7.0 - io.buji:buji-pac4j 4.1.1 -...