Skip to contentApereo Central Authentication Service vulnerabilities
- apereo cas, central authentication service +1 moreApereo CAS CasConfigurationMetadataServerController.java redosCVE-2025-39865.3 Medium
- apereo cas, central authentication service +1 moreApereo CAS ResponseEntity redosCVE-2025-39855.1 Medium
- apereo cas, central authentication service +1 moreApereo CAS Groovy Code RegisteredServiceSimpleFormController.java saveService code injectionCVE-2025-39842.3 Low
- apereo cas, cas server, central authentication service +2 moreApereo CAS 2FA login improper authenticationCVE-2024-112095.3 Medium
- apereo cas, cas server, central authentication service +2 moreApereo CAS login session expirationCVE-2024-112086.3 Medium
- apereo cas, central authentication service +1 moreApereo CAS login redirectCVE-2024-112075.3 Medium
- apereo cas, central authentication service +1 moreCAS <= 1.0.0 - Unauthenticated SSRFCVE-2024-43999.1 Critical
- apereo cas, central authentication service +1 moreMFA bypass in Apereo CASCVE-2023-46129.8 Critical
- apereo cas, central authentication service +1 moreLDAP password leak in Apereo CAS - GHSL-2023-009CVE-2023-28857Fix available4.0 Medium
- apereo central authentication serviceCross-site Scripting in Apereo CASCVE-2021-42567Fix available6.1 Medium
- apereo central authentication serviceImproper Authentication in Apereo CASCVE-2020-27178Fix available7.5 High
- apereo central authentication serviceUse of Insufficiently Random Values in Apereo CASCVE-2019-10754Fix available8.1 High
- apereo central authentication serviceApereo Central Authentication Service (CAS) Server before 3.5.3 allows remote attackers to...CVE-2015-11697.5 High