Cross-site Scripting in Apereo CAS

GHSA ID

GHSA-gfhx-jjwq-63gv

CVE ID

CVE-2021-42567

Severity

medium

Published

2021-12-10T20:24:11Z

Updated

2023-04-03T18:04:44Z

Description

CWEs

• CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-42567 ↗
• https://apereo.github.io/2021/10/18/restvuln/ ↗
• https://github.com/apereo/cas/releases ↗
• https://github.com/apereo/cas/commit/376bf087d6d4267f61fc9f8028aa0d1ef407c3f0 ↗
• https://github.com/advisories/GHSA-gfhx-jjwq-63gv ↗