Code Injection

org.apereo.cas:cas-management-webapp-support is vulnerable to Code Injection. The vulnerability is due to improper input handling due to unsanitized Groovy code execution in the saveService function, which allows remote attackers to inject and execute arbitrary code...

org.apereo.cas:cas-management-webapp (>=5.0.0.m1, <=5.0.10) potentially affected by CVE-2025-3985 via org.apereo.cas:cas-management-webapp-support (>=5.0.0, <=5.0.10)

org.apereo.cas:cas-management-webapp-support MAVEN version =5.0.0, =5.0.0.m1, =5.0.10 Source cves: CVE-2025-3985 Source advisory: SNYK:JAVA-ORGAPEREOCAS-9893216...

org.apereo.cas:cas-management-webapp (>=5.0.0.m1, <=5.0.10) potentially affected by CVE-2025-3984 via org.apereo.cas:cas-management-webapp-support (>=5.0.0, <=5.0.10)

org.apereo.cas:cas-management-webapp-support MAVEN version =5.0.0, =5.0.0.m1, =5.0.10 Source cves: CVE-2025-3984 Source advisory: SNYK:JAVA-ORGAPEREOCAS-9893219...