CVE-2025-3984

A vulnerability was found in Apereo CAS 5.2.6 and classified as critical. Affected by this issue is the function saveService of the file cas-5.2.6\webapp-mgmt\cas-management-webapp-support\src\main\java\org\apereo\cas\mgmt\services\web\RegisteredServiceSimpleFormController.java of the component...

org.apereo.cas:cas-management-webapp (>=5.0.0.m1, <=5.0.10) potentially affected by CVE-2025-3984 via org.apereo.cas:cas-management-webapp-support (>=5.0.0.m1, <=5.0.10)

org.apereo.cas:cas-management-webapp-support MAVEN version =5.0.0.m1, =5.0.0.m1, =5.0.10 Source cves: CVE-2025-3984 Source advisory: OSV:GHSA-37PQ-893F-G7Q5...

org.apereo.cas:cas-management-webapp (>=5.0.0.m1, <=5.0.10) potentially affected by CVE-2025-3984 via org.apereo.cas:cas-management-webapp-support (>=5.0.0.m1, <=5.0.10)

org.apereo.cas:cas-management-webapp-support MAVEN version =5.0.0.m1, =5.0.0.m1, =5.0.10 Source cves: CVE-2025-3984 Source advisory: SNYK:JAVA-ORGAPEREOCAS-9893219...

CVE-2025-3984

creationtimestamp| type| source ---|---|--- 2025-04-27 20:09:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13632 2025-04-27 21:40:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnt7owv5fv2d 2025-04-27 23:00:34+00:00| seen|...

CVE-2025-3984

CVE-2025-3984 affects Apereo CAS 5.2.6. The vulnerability targets the saveService function in cas-5.2.6/webapp-mgmt/cas-management-webapp-support/src/main/java/org/apereo/cas/mgmt/services/web/RegisteredServiceSimpleFormController.java (Groovy Code Handler), enabling code injection. Reported as n...