CVE-2026-87937: CVE-2026-87937: açık yönlendirme

Açıklama (NVD)

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server allows Fake the Source of Data. This issue affects Central Authentication System (CAS) Server versions: from 0.0.0 to 2.0.4, from 2.1.0 to 2.1.3.

Özet bilgiler

CVSS v3.1

6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS

%0,28 (yüzdelik 21)

CWE

CWE-601

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• www.drupal.org
• CWE-601