CVE-2026-87937

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server allows Fake the Source of Data. This issue affects Central Authentication System (CAS) Server versions: from 0.0.0 to 2.0.4, from 2.1.0 to 2.1.3.

Traduire en français

Produits concernés

• Drupal Central Authentication System (CAS) Server

Faiblesses (CWE)

• CWE-601

Références

• https://www.drupal.org/sa-contrib-2026-135

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories