CVE-2014-4172

A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before 1.3.3 that allow remote attackers to inject arbitrary web script or HTML via the (1) service parameter to validation/AbstractUrlBasedTicketValidator.java or (2) pgtUrl parameter to validation/Cas20ServiceTicketValidator.java.

• CWE-74

• http://lists.fedoraproject.org/pipermail/package-announce/2014-August/137182.htmlThird Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759718Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1131350Issue Tracking, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95673Third Party Advisory, VDB Entry
• https://github.com/Jasig/dotnet-cas-client/commit/f0e030014fb7a39e5f38469f43199dc590fd0e8dPatch, Third Party Advisory
• https://github.com/Jasig/java-cas-client/commit/ae37092100c8eaec610dab6d83e5e05a8ee58814Patch, Third Party Advisory
• https://github.com/Jasig/phpCAS/blob/master/docs/ChangeLogRelease Notes, Third Party Advisory
• https://github.com/Jasig/phpCAS/pull/125Third Party Advisory
• https://issues.jasig.org/browse/CASC-228Third Party Advisory
• https://www.debian.org/security/2014/dsa-3017.en.htmlThird Party Advisory
• https://www.mail-archive.com/cas-user%40lists.jasig.org/msg17338.html
• http://lists.fedoraproject.org/pipermail/package-announce/2014-August/137182.htmlThird Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759718Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1131350Issue Tracking, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95673Third Party Advisory, VDB Entry
• https://github.com/Jasig/dotnet-cas-client/commit/f0e030014fb7a39e5f38469f43199dc590fd0e8dPatch, Third Party Advisory
• https://github.com/Jasig/java-cas-client/commit/ae37092100c8eaec610dab6d83e5e05a8ee58814Patch, Third Party Advisory
• https://github.com/Jasig/phpCAS/blob/master/docs/ChangeLogRelease Notes, Third Party Advisory
• https://github.com/Jasig/phpCAS/pull/125Third Party Advisory
• https://issues.jasig.org/browse/CASC-228Third Party Advisory
• https://www.debian.org/security/2014/dsa-3017.en.htmlThird Party Advisory
• https://www.mail-archive.com/cas-user%40lists.jasig.org/msg17338.html

Published

Jan 24, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-4165Cross-site scripting (XSS) vulnerability in ntop allows remo…
• CVE-2014-4166Cross-site scripting (XSS) vulnerability in the song history…
• CVE-2014-4167The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x be…
• CVE-2014-4168(1) iodined.c and (2) user.c in iodine before 0.7.0 allows r…
• CVE-2014-4170A Privilege Escalation Vulnerability exists in Free Reprinta…9.8
• CVE-2014-4171mm/shmem.c in the Linux kernel through 3.15.1 does not prope…
• CVE-2014-4174wiretap/libpcap.c in the libpcap file parser in Wireshark 1.…
• CVE-2014-4187Cross-site scripting (XSS) vulnerability in signup.php in Cl…
• CVE-2014-4188Cross-site request forgery (CSRF) vulnerability in Hitachi T…
• CVE-2014-4189Cross-site scripting (XSS) vulnerability in Hitachi Tuning M…
• CVE-2014-4190Multiple heap-based buffer overflows in Huawei Campus Series…
• CVE-2014-4191The TLS implementation in EMC RSA BSAFE-C Toolkits (aka Shar…