Vulnerabilities > Apereo > Central Authentication Service > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-12-07 CVE-2021-42567 Cross-site Scripting vulnerability in Apereo Central Authentication Service
Apereo CAS through 6.4.1 allows XSS via POST requests sent to the REST API endpoints.
network
low complexity
apereo CWE-79
6.1