CVE-2026-79577
An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request.
Published: 2026-09-08 · CVSS: 9.8 · CVSS 3.1
An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7