Description
Apereo CAS through 6.4.1 allows XSS via POST requests sent to the REST API endpoints.
Remediation
References
https://apereo.github.io/2021/10/18/restvuln/
https://github.com/apereo/cas/releases
Related Vulnerabilities
CVE-2022-23505 Vulnerability in npm package passport-wsfed-saml2
CVE-2019-8331 Vulnerability in maven package org.webjars.bower:bootstrap
CVE-2018-20677 Vulnerability in maven package org.fujion.webjars:bootstrap
CVE-2021-37533 Vulnerability in maven package commons-net:commons-net
CVE-2021-23337 Vulnerability in maven package org.webjars:lodash