« Volver al listado

CVE-2026-1554

Estado: AnalizadaMedia (4.2)—

XML Injection (aka Blind XPath Injection) vulnerability in Drupal Central Authentication System (CAS) Server allows Privilege Escalation.This issue affects Central Authentication System (CAS) Server: from 0.0.0 before 2.0.3, from 2.1.0 before 2.1.2.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Jtenman — Central Authentication System Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-1554",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-1554",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-02-05T15:14:46.442485Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.2,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.5,
        "exploitabilityScore": 1.6
      }
    ]
  },
  "affected": [
    {
      "source": "mlhess@drupal.org",
      "affectedData": [
        {
          "repo": "https://git.drupalcode.org/project/cas_server",
          "vendor": "Drupal",
          "product": "Central Authentication System (CAS) Server",
          "versions": [
            {
              "status": "affected",
              "version": "0.0.0",
              "lessThan": "2.0.3",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "2.1.0",
              "lessThan": "2.1.2",
              "versionType": "semver"
            }
          ],
          "collectionURL": "https://www.drupal.org/project/cas_server",
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2026-02-04T21:15:59.427",
  "references": [
    {
      "url": "https://www.drupal.org/sa-contrib-2026-007",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "mlhess@drupal.org"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "mlhess@drupal.org",
      "description": [
        {
          "lang": "en",
          "value": "CWE-91"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "XML Injection (aka Blind XPath Injection) vulnerability in Drupal Central Authentication System (CAS) Server allows Privilege Escalation.This issue affects Central Authentication System (CAS) Server: from 0.0.0 before 2.0.3, from 2.1.0 before 2.1.2."
    },
    {
      "lang": "es",
      "value": "Inyección XML (también conocida como Inyección XPath Ciega) vulnerabilidad en el servidor del Sistema de Autenticación Central (CAS) de Drupal permite la escalada de privilegios. Este problema afecta al servidor del Sistema de Autenticación Central (CAS): desde 0.0.0 anterior a 2.0.3, desde 2.1.0 anterior a 2.1.2."
    }
  ],
  "lastModified": "2026-06-17T10:16:03.767",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:jtenman:central_authentication_system_server:*:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "667508E4-C557-47F0-8038-58B3CAF1851E",
              "versionEndExcluding": "2.0.3"
            },
            {
              "criteria": "cpe:2.3:a:jtenman:central_authentication_system_server:*:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1925AABB-E45D-40EC-9357-07091200BF4B",
              "versionEndExcluding": "2.1.2",
              "versionStartIncluding": "2.1.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "mlhess@drupal.org"
}