CVE-2026-87937

The Drupal Central Authentication System (CAS) Server module is vulnerable to an open redirect (CWE-601) due to insufficient validation of the service URL during the logout process. This flaw allows an attacker to redirect users to untrusted sites, potentially facilitating data source spoofing. T...

EUVD-2026-107864

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Drupal Central Authentication System CAS Server allows Fake the Source of Data. This issue affects Central Authentication System CAS Server versions: from 0.0.0 to 2.0.4, from 2.1.0 to 2.1.3...