Packagist/apereo/phpcas CVE-2010-1618: medium, EPSS 1.81%

phpCAS client library and Moodle Cross-site Scripting vulnerability

Action: Upgrade apereo/phpcas to 1.1.0 or later.

composer require apereo/phpcas:1.1.0

Affected

Fixed versions

Sources

• osv: GHSA-45ch-hxgr-vx8j
• https://nvd.nist.gov/vuln/detail/CVE-2010-1618
• https://github.com/apereo/phpCAS/commit/021633112198b37555b35340cde884d1016d9e47
• https://github.com/apereo/phpCAS
• http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html
• http://moodle.org/security
• http://www.ja-sig.org/issues/browse/PHPCAS-52
• http://www.ja-sig.org/wiki/display/CASC/phpCAS+ChangeLog
• http://www.vupen.com/english/advisories/2010/1107

CVE-2010-1618 · published 2022-05-13T01:13:09Z · modified 2024-02-07T23:12:30.724580Z · JSON