← Database

CVE-2026-87937

N/A CVSS: N/A Published: 2026-10-22 Modified: 2026-10-22

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server allows Fake the Source of Data. This issue affects Central Authentication System (CAS) Server versions: from 0.0.0 to 2.0.4, from 2.1.0 to 2.1.3.

Affected Platforms

Unknown

Weakness Type

CWE-601

References