io.buji:buji-pac4j (2.2.0), org.apereo.cas:cas-management-webapp (>=5.0.6, <=5.0.10) +97 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (1.9.7)

org.pac4j:pac4j-core MAVEN version 1.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.buji:buji-pac4j 2.2.0 - org.apereo.cas:cas-management-webapp =5.0.6, =5.0.6, =5.0.6, =5.0.6, =5.0.6, =5.0.6, =5.0.6,...

CVE-2025-3984 Apereo CAS Groovy Code RegisteredServiceSimpleFormController.java saveService code injection

A vulnerability was found in Apereo CAS 5.2.6 and classified as critical. Affected by this issue is the function saveService of the file cas-5.2.6\webapp-mgmt\cas-management-webapp-support\src\main\java\org\apereo\cas\mgmt\services\web\RegisteredServiceSimpleFormController.java of the component...

org.apereo.cas:cas-management-webapp (5.0.0.rc1), org.apereo.cas:cas-management-webapp-support (5.0.0.rc1) +69 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.0.rc1)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.0.rc1 -...

org.apereo.cas:cas-management-webapp (5.0.6), org.apereo.cas:cas-management-webapp-support (5.0.6) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.6)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.6 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-management-webapp (5.0.3), org.apereo.cas:cas-management-webapp-support (5.0.3) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.3)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.3 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-management-webapp (5.0.5), org.apereo.cas:cas-management-webapp-support (5.0.5) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.5)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.5 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-management-webapp-support (5.3.0-rc3) potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.3.0-rc3)

org.apereo.cas:cas-server-core-web MAVEN version 5.3.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.3.0-rc3 Source cves: CVE-2021-42567 Sour...

org.apereo.cas:cas-management-webapp-support (5.1.0), org.apereo.cas:cas-server-core (5.1.0) +113 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.1.0)

org.apereo.cas:cas-server-core-web MAVEN version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.1.0 - org.apereo.cas:cas-server-core 5.1.0 -...

org.apereo.cas:cas-management-webapp (5.0.0.rc3), org.apereo.cas:cas-management-webapp-support (5.0.0.rc3) +75 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.0.rc3)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.0.rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.0.rc3 -...

org.apereo.cas:cas-management-webapp (5.0.4), org.apereo.cas:cas-management-webapp-support (5.0.4) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.4)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.4 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-management-webapp (5.0.8), org.apereo.cas:cas-management-webapp-support (5.0.8) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.8)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.8 - org.apereo.cas:cas-management-webapp-support...