CVE-2024-4399 The does not validate a parameter before making a request to it, which could allow unauthenticated users to perform…

Description

The does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSRF attack

Affected products and versions

Product	Affected versions	Fixed in
cas 1.0	earliest → 1.0.0	No fix stated
cas 1.0	earliest → 1.0.0	No fix stated

Other CVEs of cas

The 2 CVEs of cas →

CVE-2024-4388 This does not validate a path generated with user input when downloading files, allowing unauthenticated user to… 7.5 High