Browse all 10 CVE security advisories affecting apereo. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Apereo develops open-source software for higher education, including the Sakai collaboration and learning management platform. Historically, vulnerabilities have commonly included remote code execution, cross-site scripting, and privilege escalation, often stemming from input validation flaws and misconfigurations. While no major public security incidents have been widely documented, the project's 8 recorded CVEs highlight ongoing security challenges typical of web applications handling sensitive academic data. The software's complex architecture and extensive customization options may introduce additional attack surfaces, requiring careful implementation and regular security updates to mitigate risks in educational environments.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-59099 | Apereo CAS 7.3.0 < 8.0.0-RC6 - AES-GCM Nonce Reuse Information Disclosure — cas CWE-323 | 9.1 | Critical | 2026-07-02 |
| CVE-2025-3986 | Apereo CAS CasConfigurationMetadataServerController.java redos — CAS CWE-1333 | 4.3 | Medium | 2025-04-27 |
| CVE-2025-3985 | Apereo CAS ResponseEntity redos — CAS CWE-1333 | 2.7 | Low | 2025-04-27 |
| CVE-2025-3984 | Apereo CAS Groovy Code RegisteredServiceSimpleFormController.java saveService code injection — CAS CWE-94 | 5.0 | Medium | 2025-04-27 |
| CVE-2024-11209 | Apereo CAS 2FA login improper authentication — CAS CWE-287 | 6.3 | Medium | 2024-11-14 |
| CVE-2024-11208 | Apereo CAS login session expiration — CAS CWE-613 | 3.7 | Low | 2024-11-14 |
| CVE-2024-11207 | Apereo CAS login redirect — CAS CWE-601 | 4.3 | Medium | 2024-11-14 |
| CVE-2023-28857 | LDAP password leak in Apereo CAS - GHSL-2023-009 — CAS CWE-200 | 4.0 | Medium | 2023-06-27 |
This page lists every published CVE security advisory associated with apereo. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.