DotNetCasClient

NuGet1 known CVE affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting DotNetCasClientpage 1 of 1

CVE-2014-4172CRITICALCVSS 9.8EG 9.8✓ Fixed in 1.0.2
2020-01-24
vulnerable: 1.0.0, 1.0.1
A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before 1.3.3 that allow remote attackers to in…

Check whether DotNetCasClient is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for DotNetCasClient CVEs against the assets you own.

Start Free Scan →