漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
insa-auth Open-Redirect on provided CAS server login endpoint
Vulnerability Description
insa-auth is an authentication server for INSA Rouen. A minor issue allowed third-party websites to access the server's secondary authentication bridge, potentially revealing basic student information (name and number). However, the issue posed minimal risk, was never exploited, and had limited impact. A fix was implemented promptly on May 3, 2025.
CVSS Information
N/A
Vulnerability Type
指向未可信站点的URL重定向(开放重定向)
Vulnerability Title
insa-auth 输入验证错误漏洞
Vulnerability Description
insa-auth是genda开源的一个认证服务工具。 insa-auth存在输入验证错误漏洞，该漏洞源于第三方网站可访问服务器辅助身份验证桥接，可能泄露基本信息。
CVSS Information
N/A
Vulnerability Type
N/A