Lucene search
+L

7 matches found

NVD
NVD
•added 2026/09/08 3:18 p.m.•24 views

CVE-2026-79577

An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request...

9.8CVSS0.00483EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/08 12:00 a.m.•42 views

CVE-2026-79577

An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request...

0.00483EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/08 12:00 a.m.•49 views

CVE-2026-79577

The sso-master v1.0.0 application contains a vulnerability in its /cas/login component. This flaw allows an attacker to bypass authentication and gain access to the application without a password by sending a crafted POST request . Detailed information regarding the specific root cause, exploitab...

9.8CVSS5.8AI score0.00483EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•25 views

PT-2026-87101

Name of the Vulnerable Software and Affected Versions sso-master version 1.0.0 Description A flaw in the '/cas/login' endpoint allows attackers to authenticate into the application without providing a password by sending a specially crafted POST request. Recommendations At the moment, there is no...

9.8CVSS5.8AI score0.00483EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•14 views

CVE-2026-79577: Improper Access Control

An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request...

9.8CVSS5.8AI score0.00483EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/08 12:00 a.m.•17 views

CVE-2026-79577

An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request...

5.8AI score0.00483EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/08 12:00 a.m.•16 views

EUVD-2026-72850

An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request...

5.7AI score0.00483EPSS
SaveExploits0References1
Rows per page
Query Builder