Open Redirection

rack-cas is susceptible to open redirection attacks. The vulnerability exists because it does not validate types of POST, PUT, DELETE requests and redirects, allowing an attacker to send a malicious URL link in the request to redirect...