Jtenman Central Authentication System Server vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Jtenman Central Authentication System Server: 1 record(s), with affected versions and fixes.cpe:2.3:a:jtenman:central_authentication_system_server
CVE-2026-1554
Medium · 4.2
CWE-91 Feb 4, 2026
Central Authentication System (CAS) Server - Less critical - XML Element Injection - SA-CONTRIB-2026-007
XML Injection (aka Blind XPath Injection) vulnerability in Drupal Central Authentication System (CAS) Server allows Privilege Escalation.This issue affects Central Authentication System (CAS) Server: from 0.0.0 before 2.0.3, from 2.1.0 before 2.1.2.