Ted Cooper

An open redirect issue exists because the module does not sufficiently validate the service URL used to redirect users during the logout process. This allows an attacker to fake the source of data by redirecting users to an untrusted site, provided the user clicks a specially crafted link.

The Central Authentication System (CAS) Server module for Drupal does not adequately sanitize user-provided field values when configured as attributes in a CAS server response, leading to an XML Element Injection issue. An attacker must be authenticated and have the ability to input XML into a user entity field that is configured as a CAS Attribute source to exploit this.