Apereo Phpcas vulnerabilities

• apereo phpcas, fedoraproject fedora +1 more Service Hostname Discovery Exploitation in phpCAS CVE-2022-39369 Fix available 8.0 HighNovember 1, 2022
• jasig project php-pear-cas, apereo phpcas, debian linux +1 more +3 more An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in... CVE-2012-1105 5.5 MediumDecember 5, 2019
• apereo phpcas, debian linux +1 more A Security Bypass vulnerability exists in the phpCAS 1.2.2 library from the jasig project due to... CVE-2012-1104 5.3 MediumDecember 5, 2019
• apereo phpcas Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20... CVE-2017-1000071 Fix available 8.1 HighJuly 13, 2017
• apereo .net cas client, java cas client, phpcas +2 more +4 more Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability CVE-2014-4172 Fix available 9.8 CriticalSeptember 2, 2014
• apereo phpcas phpCAS before 1.3.2 does not verify that the server hostname matches a domain name in the subject... CVE-2012-5583 Fix available 5.8 MediumJune 6, 2014
• apereo phpcas Directory traversal vulnerability in the callback function in client.php in phpCAS before 1.1.3,... CVE-2010-3692 6.4 MediumOctober 7, 2010
• apereo phpcas PGTStorage/pgt-file.php in phpCAS before 1.1.3, when proxy mode is enabled, allows local users to... CVE-2010-3691 3.3 LowOctober 7, 2010
• apereo phpcas Multiple cross-site scripting (XSS) vulnerabilities in phpCAS before 1.1.3, when proxy mode is... CVE-2010-3690 4.3 MediumOctober 7, 2010