Central Authentication System (Cas) Server
The Central Authentication System (CAS) Server module for Drupal does not adequately sanitize user-provided field values when configured as attributes in a CAS server response, leading to an XML Element Injection issue. An attacker must be authenticated and have the ability to input XML into a user entity field that is configured as a CAS Attribute source to exploit this.