CVE-2026-87937
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server allows Fake the Source of Data.
- Severity: Medium
- CVSS 6.5
- EPSS 0.18%
- P4 · Track
Why P4: track.
Description
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server allows Fake the Source of Data. This issue affects Central Authentication System (CAS) Server versions: from 0.0.0 to 2.0.4, from 2.1.0 to 2.1.3.
Weakness
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
References
- NVD record NVD
- CVE Program record CVE Program
- Reference NVD
- GitHub security advisory GitHub