PT-2026-89237

Name of the Vulnerable Software and Affected Versions Drupal Central Authentication System CAS Server versions 0.0.0 through 2.0.4 Drupal Central Authentication System CAS Server versions 2.1.0 through 2.1.3 Description An open redirect issue exists because the module does not sufficiently valida...

Authentication flaw

The Login Disable module 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.2 for Drupal does not properly load the userlogout function, which allows remote attackers to bypass the logout protection mechanism by leveraging a contributed user authentication module, as demonstrated by the CAS and URL...