CVE-2021-42567

Description

Apereo CAS through 6.4.1 allows XSS via POST requests sent to the REST API endpoints.

Affected packages (1)

• Maven/org.apereo.cas:cas-server-core-webfrom 0, < 6.4.2

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2021-42567
• PATCHhttps://github.com/apereo/cas
• WEBhttps://apereo.github.io/2021/10/18/restvuln
• WEBhttps://github.com/apereo/cas/commit/376bf087d6d4267f61fc9f8028aa0d1ef407c3f0
• WEBhttps://github.com/apereo/cas/releases