CVE-2025-46826 — insa-auth Open-Redirect on provided CAS server login endpoint
insa-auth is an authentication server for INSA Rouen. A minor issue allowed third-party websites to access the server's secondary authentication bridge, potentially revealing ba…
Published: 2025-05-07 · CVSS: 1.3 · CVSS 4.0
insa-auth is an authentication server for INSA Rouen. A minor issue allowed third-party websites to access the server's secondary authentication bridge, potentially revealing basic student information (name and number). However, the issue posed minimal risk, was never exploited, and had limited impact. A fix was implemented promptly on May 3, 2025.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7