IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-02-04 21:15

MODIFIED

2026-02-04 21:15

EPSS (Prob. Exploit)

0.18%

Top 93.2%

DATA SOURCES:

NVD 🔗 2026-02-04 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

XML Injection (aka Blind XPath Injection) vulnerability in Drupal Central Authentication System (CAS) Server allows Privilege Escalation.This issue affects Central Authentication System (CAS) Server: from 0.0.0 before 2.0.3, from 2.1.0 before 2.1.2.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-91

> CWE DETAILED DESCRIPTIONS

CWE-91: XML Injection - The product does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system.

> HISTORIQUE DES MODIFICATIONS

Première apparition

04/02/2026 21:15

Source: NVD

📊 ENRICHISSEMENT 01/11/2026 06:58

CWE

Champ modifié: Description CWE

Ancienne valeur:

CWE-91: XML Injection (aka Blind XPath Injection) - The product does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the...

Nouvelle valeur:

📊 ENRICHISSEMENT 01/03/2026 06:46

CWE