Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CAS — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in CAS, with AI-generated Chinese analysis, references, and POCs.

Vendor: Apereo

CVE IDTitleCVSSSeverityPublished
CVE-2026-59099 Apereo CAS 7.3.0 < 8.0.0-RC6 - AES-GCM Nonce Reuse Information Disclosure CWE-323 9.1 Critical2026-07-02
CVE-2025-3986 Apereo CAS CasConfigurationMetadataServerController.java redos CWE-1333 4.3 Medium2025-04-27
CVE-2025-3985 Apereo CAS ResponseEntity redos CWE-1333 2.7 Low2025-04-27
CVE-2025-3984 Apereo CAS Groovy Code RegisteredServiceSimpleFormController.java saveService code injection CWE-94 5.0 Medium2025-04-27
CVE-2024-11209 Apereo CAS 2FA login improper authentication CWE-287 6.3 Medium2024-11-14
CVE-2024-11208 Apereo CAS login session expiration CWE-613 3.7 Low2024-11-14
CVE-2024-11207 Apereo CAS login redirect CWE-601 4.3 Medium2024-11-14
CVE-2024-4399 CAS <= 1.0.0 - Unauthenticated SSRF 9.1AICriticalAI2024-05-23
CVE-2024-4388 CAS <= 1.0.0 - Unauthenticated Arbitrary File Access 7.5AIHighAI2024-05-23
CVE-2023-4612 MFA bypass in Apereo CAS CWE-302 9.1 -2023-11-09
CVE-2023-28857 LDAP password leak in Apereo CAS - GHSL-2023-009 CWE-200 4.0 Medium2023-06-27

All 11 known CVE vulnerabilities affecting CAS with full Chinese analysis, references, and POCs where available.