CVE-2021-42567

描述

Apereo CAS through 6.4.1 allows XSS via POST requests sent to the REST API endpoints.

受影響套件(1)

• Maven/org.apereo.cas:cas-server-core-webfrom 0, < 6.4.2

參考連結(5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2021-42567
• PATCHhttps://github.com/apereo/cas
• WEBhttps://apereo.github.io/2021/10/18/restvuln
• WEBhttps://github.com/apereo/cas/commit/376bf087d6d4267f61fc9f8028aa0d1ef407c3f0
• WEBhttps://github.com/apereo/cas/releases