NetSight
IP …
medium4.2

CVE-2026-1554

XML Injection (aka Blind XPath Injection) vulnerability in Drupal Central Authentication System (CAS) Server allows Privilege Escalation.This issue affects Cen…

Impact

XML Injection (aka Blind XPath Injection) vulnerability in Drupal Central Authentication System (CAS) Server allows Privilege Escalation.This issue affects Central Authentication System (CAS) Server: from 0.0.0 before 2.0.3, from 2.1.0 before 2.1.2.

Affected products

VendorProductAffected versions
JtenmanCentral Authentication System Server
before 2.0.3
from 2.1.0 before 2.1.2

Weakness classification

CWE-91

References