| Package | Affected versions | Patched versions |
|---|---|---|
| central authentication service | ≤ 3.5.2 |
Apereo Central Authentication Service (CAS) Server before 3.5.3 allows remote attackers to conduct LDAP injection attacks via a crafted username, as demonstrated by using a wildcard and a valid password to bypass LDAP authentication.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free